Nexuvius

Identity and access security tools you run yourself, built on open standards.

We start at the root of trust, the identity provider, and build outward: the gateway that enforces it, and the tools that audit and watch it. Every product carries a Tamil name, a nod to where Nexuvius comes from.

See the products contact@nexuvius.com
How the Nexuvius products fit together A person or AI agent signs in at Aadhi, Aran checks every request on its way to your apps, and Vizhi and Kaval watch over the whole path. You, or your AI agent ஆதி Aadhi proves who it is அரண் Aran checks every request Your apps and APIs Vizhi audits AWS access Kaval watches (planned)
Sign in once at Aadhi. Aran checks every request after that. Vizhi and Kaval (planned) watch the whole path.

Built on open standards

Aadhi has passed the OpenID Foundation's Basic OP conformance tests in our own run. Formal certification is in progress.

What we're building

Three products are working builds today, and two more are planned. Aadhi is the first, and it is already running live.

ஆதி

Aadhi "origin"

A self-hosted identity provider for your apps and AI agents. One small server and a database, on infrastructure you control.

  • Passkeys, authenticator apps and recovery codes
  • Single sign-on with OpenID Connect and SAML 2.0
  • Scoped, revocable tokens for AI agents acting for a person
  • Separate organizations for each of your customers
Working build, running live
Explore Aadhi See it live
Aadhi page for turning on two-factor authentication with a QR code
Aadhi sign-in page
  • அரண்

    Aran "fortress"

    Zero Trust access gateway. Sits in front of internal apps and checks identity, device posture, and policy on every request, with mutual TLS to the services behind it.

    Working build
  • விழி

    Vizhi "eye"

    AWS IAM auditor. Finds over-permissive policies and explains each finding in plain English, so teams know what to fix and why.

    Working build
  • காவல்

    Kaval "guard"

    Security monitoring and detection, built to take in the audit trails the other products produce.

    Planned
  • நெறி

    Neri "the right path"

    Compliance engine that maps security controls to the evidence that proves them.

    Planned

How we build

  • Standards firstOpenID Connect, OAuth, and the RFCs around them, implemented as written so our tools work with yours.
  • Yours to runOur tools run on your own servers, so your users' data stays with you. Standard protocols mean you are never locked in.
  • Proven, not promisedWe back claims with evidence you can check, like Aadhi passing the OpenID Foundation's Basic OP conformance tests, and a security review before every release.