Company
01Origin
Forged for our own identity provider.
IronVelo needed authorization it could prove, not just test. No existing tool offered that, so it built Scope-Forge.
The nearest tool, Cedar, keeps its specification and proofs in Lean and checks its Rust implementation against them by differential testing; the implementation that runs is not itself verified (Cedar specification repository). IronVelo needed the compiler itself proven correct, with no outside solver in the decision, and the policy that was proved to be the policy that runs.
Today IronIdP's permissions are defined in Scope-Forge and enforced by the policies Scope-Forge compiles. The tool forged for IronVelo's own high-assurance identity provider is now available for any system that has to get access decisions right.
That standard, proof rather than hope, is what IronVelo brings to every system it builds.
02Standard
Proof rather than hope.
The Scope-Forge compiler and the core libraries are machine-checked with Verus for every possible input, not a sample, and the policy that was proved is the policy that runs: about 54,000 lines of running code under about 100,000 lines of machine-checked specification and proof, over 150,000 lines in all, measured in a single run of the verifier with zero errors.
Every verified system trusts its toolchain. IronVelo's trusted base is small and stated on the Verification page, and every assumption inside its own libraries is marked and analyzed one by one.
03Partners and advisors
Outside the company.
- 001wolfSSL. IronVelo is a wolfSSL partner, and IronIdP's cryptography is built on wolfSSL's wolfCrypt module, which holds FIPS 140-3 validation (CMVP certificate 4718, Level 1).wolfSSL on the partnership, 2025; wolfCrypt FIPS 140-3 validationPartner, cryptography supplier
- 002Jack Tomarchio, former Deputy Under Secretary for Intelligence and Analysis Operations at the Department of Homeland Security, advises the company.Foreign Policy Research Institute biographyAdvisor