About Rust Riders
We’re building the company we’d want to buy from.
Higher standards for our product, real respect for the people who use it, and a hard line on privacy — we never collect data to sell, or data that could be handed over on request. We solve real problems the right way.
How we work
Opinionated, on purpose.
Hand-written, no AI
Every line of Rust Riders is written by hand. We have zero intent to be an “AI-built” company or chase the hype — deterministic and explainable, on purpose.
We run on what we support
Our own infrastructure is deployed as clusters of FreeBSD jails, with internal communication over mTLS gRPC across jail interfaces. No Docker, no Kubernetes.
Privacy by architecture
We host independently — not on AWS, GCP, or Azure. No telemetry, no tracking, no data collection or sale. The only thing we hold on you is your email.
We give back
We’re proudly commercial, not open source — and 10% of all profit goes to non-profits: 1% each to ten groups, including FreeBSD, OpenBSD, and the EFF.
Under the hood
What Rust Riders is made of.
- Agent
- Rust
- Backend
- Go
- Frontend
- Rust (Actix) serving minified Askama templates
- PKI
- Custom, built in Rust
- Auth
- 3-minute-expiry JWTs; 8-digit TOTP over SHA-512 (6-digit deliberately unsupported)
- Transport
- gRPC over mTLS — ~1–1.5 ms typical
- Licensing & trust
- 7-day x509 certificates, config-in-OID bitflags, 4-way OCSP fail-closed, instant revocation
- Database
- PostgreSQL — one per organization
- Infrastructure
- Clusters of FreeBSD jails; internal mTLS gRPC over jail interfaces — no Docker, no Kubernetes
- Hosting
- Independent — not AWS, GCP, or Azure
- Privacy
- No telemetry, no tracking, no data collection or sale — email only
- Platforms
- Debian, RHEL, FreeBSD, OpenBSD, NetBSD, DragonFly BSD (Windows and macOS on the roadmap)
Where we are
Direction, not dates.
Today
Private staging, roughly 80% ready. The backend is fast and hardened; the frontend is functional and still being polished. One-time payments work today.
In progress
Recurring billing, XMR payments, and KEV + EPSS enrichment of CVE data.
Up next
Frontend polish, plus Windows and macOS agents.
On the horizon
FIPS/CIS reporting and encryption of user data at rest.
Themes and direction — we ship when it’s right.