Chapter 2 of 5

Here's what the attacker sees

CrowdStrike✓ TRUSTEDNext scan: 11:47

attacker@evil-twin ~ intercepted_traffic.log

[09:14:02] GET mail.google.com — Session cookie: gads=CAESEBk2x...

[09:14:03] POST chase.com/api/transfer — Auth token: eyJhbGciOi...

[09:14:05] WSS slack.com — Message: "The board deck is at..."

[09:14:06] GET icloud.com/photos — Apple ID token: dk39fL2m8x...

[09:14:08] POST vpn.acmecorp.com — VPN creds: admin:Tr0ub4...

Your bank. Your email. Your Slack. Your iCloud. Your VPN.
All readable. All harvestable.
Your device? Still showing "Trusted" on CrowdStrike. Next check in 12 minutes.

Chapter 3 of 5 — Rewind

Same WiFi. H33-ZK Proven active.

Trust Score

h33-zk-proven ~ channel_verification.log

[200ms] Ephemeral key: ✓ Fresh Dilithium-3 keypair

[200ms] Temporal coherence: ✓ Monotonic timestamps

[200ms] Canary signal: ✓ Epoch seed validated

[400ms] Network topology: ⚠ ANOMALY — Expected 3 hops, found 4

[400ms] Latency profile: ⚠ ANOMALY — Bimodal distribution detected

[400ms] Network DNA: ✗ MISMATCH — Profile inconsistent with airport infrastructure

CONNECTION TERMINATED

[400ms] Attacker harvest log: 0 bytes captured · IOC proof emitted · Nullifier committed

ZK Proven detected an extra network hop (the attacker's device), bimodal latency (proxy processing), and a network DNA mismatch. Score collapsed to zero. Connection killed in 400 milliseconds.

"The WiFi looked real."

"ZK Proven didn't care how it looked."

"It didn't trust the signal. It proved the channel."

Every connection Every device Every millisecond API-first
Machine-to-machine Device-to-device Zero persistent state

Start Free — 1,000 Ops Read the Docs

No credit card. Post-quantum from line one.

0.4µs

Score Computation

23.58µs

Proof Generation

1,200

Checks Per Blink

200ms

Key Rotation

10 Connection-Layer Attacks. One Solution.

Every attack on this list has been used in the wild. ZK-Proven kills each one with math — not signatures, not heuristics, not scan schedules.

Evil Twin

Fake WiFi with the same name as a legitimate network. Your device auto-connects. Attacker sits in the middle.

Network DNA mismatch detected

IMSI Catcher / Stingray

Fake cell tower intercepts mobile traffic. Used by nation-states and organized crime.

Signal physics violation detected

SSL Stripping

Downgrades HTTPS to HTTP silently. Credentials sent in plaintext.

Encryption downgrade triggers score collapse

ARP Poisoning

Redirects traffic on local network by spoofing ARP tables. Classic LAN attack.

Network topology detects rogue routing

DNS Spoofing

Fake DNS resolves legitimate domains to attacker-controlled servers.

Canary validation fails

Rogue Access Point

Unauthorized AP installed inside corporate network. Bypasses perimeter security.

Network DNA doesn't match

Man-in-the-Middle

Any proxy sitting between two endpoints. Intercepts, modifies, or records traffic.

Extra hop detected, timing mismatch

Replay Attacks

Re-transmit previously captured authentication tokens to gain unauthorized access.

Dilithium temporal binding, 200ms expiry

Session Hijacking

Steal session cookies to impersonate an authenticated user.

Cross-session nullifiers detect reuse

BGP Hijacking

Route injection at the protocol level. Entire subnets redirected through attacker infrastructure.

Network topology proof fails

Not Just WiFi. Every Connection.

H33-ZK-Proven operates at the protocol layer. It doesn't matter if the attacker is between your phone and a WiFi router, between two servers in a data center, or between your IoT device and its cloud endpoint. If something is sitting in the middle — at any layer — the proof math breaks.

Physical layer (WiFi, cellular, Bluetooth)

Network layer (routing, ARP, IP)

DNS layer (resolution, hijacking)

TLS/SSL layer (certificates, encryption)

Session layer (cookies, tokens)

API layer (microservices, cloud-to-cloud)

IoT layer (firmware updates, device pairing)

You just connected to
airport WiFi.

Without ZK Proven

With ZK Proven

You just connected toairport WiFi.

Without ZK Proven

With ZK Proven

You just connected to
airport WiFi.