Grant recipient · Kvadrat Labs
The custody protocol
on Solana.
Keys, policies and limits for teams that hold assets on-chain — 400,000+ wallets, one lattice.
Vault Market
Access every custody module and ecosystem product at a glance, in one super-app.
More detailsThe gateway to
on-chain custody
Solana’s flagship custody market
Rotate keys, set limits and trade custody modules from Solana’s largest programs, all in one place.
Vault Market
Your one-stop access to every custody module in the ecosystem.
Policy engine [VPE]
The native policy language built off the Vault lattice.
Solana’s custody market
Deploy, tokenize and trade custody policies across Solana’s biggest programs.
Launch nowOur partners
Custody
One structure for every key your programs read.
One lattice
Keys, policies and limits live in one versioned tree. Every program is a slice of the same structure.
Blast radius
Before you rotate a key, Vault shows which programs, jobs and people it touches.
Rotate in place
Rotate signers without a redeploy. Programs pick up the new key at the next read.
Roll back
Every write is a version. Roll any key, policy or environment back in one click.
Audit that reads
Who, what, when — as a timeline, not a log dump. Export to your SIEM.
SDKs that cache
Twelve SDKs with local caching and signed reads, so a Vault blip never takes you down.
Security
Boring on purpose.
The spec sheet, in full. Ask for the audit report and the SOC 2 letter — we send both the same day.
- Keys
- MPC + HSM-backed signers · per-tenant keys · no single point of custody
- Policies
- Limits per program, per signer, per day · multi-sig thresholds · time locks
- Compliance
- SOC 2 Type II · ISO 27001 · GDPR DPA · travel-rule ready
- Residency
- EU (Frankfurt) or US (Ashburn); no cross-region replication unless you enable it
- Uptime
- 99.99% SLA · multi-AZ · signed read cache in every SDK
How it works
Import, wire, carve.
Import
Point Vault at your wallets, programs and existing signers. It builds the lattice for you.
Wire
Drop in an SDK or the CLI. Reads are cached and signed; writes are versioned.
Carve
Change keys and limits with the blast radius in view. Rotate, roll back, review — all in place.
Plans
Three programs free. Then per seat.
Free
For solo builders
- 3 programs
- 2 environments
- 30-day history
- Community support
Team
PopularFor teams shipping daily
- Unlimited programs
- Unlimited environments
- 1-year history
- SSO + roles
- Slack alerts
Enterprise
For regulated custodians
- HSM-backed keys
- Custom DPA
- Dedicated region
- Audit export
- Support SLA
“The blast-radius view stopped a mainnet incident on day two. We had no idea that signer fed four programs.”
“Rotation without a redeploy. That alone paid for the year.”
FAQ
Before you import.
No. Vault is a custody layer: it holds keys with MPC and HSM signers, applies your policies, and signs for the programs you approve.
SDKs serve the last signed value from cache. Writes queue. Your programs keep running.
Enterprise can run Vault in a dedicated region or bring their own HSM. Fully self-hosted is on the roadmap.
Solana first. EVM chains are in private beta.
Carve your first key.
Free for three programs. Import your wallets in under a minute.
- MPC + HSM
- Solana mainnet
- SOC 2
- EU data