Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.

Skip to main content

KryptoVault home page

Get Started
Get Started

Get Started

What is KryptoVault
Core concepts & glossary
Architecture overview
Quickstart

Platform Concepts

Tenancy & namespaces
Encryption & key hierarchy
Gateway model
Identities, certs & secrets

Certificate Management

Overview
Discovery
Certificate stores
Certificate Inventory
Certificate Signing Request (CSR)
Issuers
Remote DNS
Remote CA
Remote Deployment
Monitoring
Self Service

Secrets Management (Key Vault)

Overview
Vaults
Secrets
Protection keys & encryption
Vault access control & data protection

Access Management

Users
Roles & permissions
Password policy
Multi-factor authentication
Session management
Single sign-on
Service accounts

Non-Human Identity

Non-Human Identity

System & Administration

Notifications
Events & audit trail
Remote forwarding
Gateways
Recycle bin
Diagnostics

Security & Trust

Security & threat model
Encryption at rest & in transit
Audit & compliance
Data residency
Self-hosted hardening

Deployment

SaaS vs Self-Hosted
SaaS
Self-Hosted
Reference deployments
Configuration & run parameters

How-To Guides

How-To Guides

Platform Concepts

Encryption & key hierarchy

Envelope encryption: secret → DEK → protection key (DEK wrapping).

This page is a scaffold stub. Content coming soon.

Was this page helpful?

Tenancy & namespaces

Powered byThis documentation is built and hosted on Mintlify, a developer documentation platform