---
canonical_url: "https://docs.circle-cyber.com"
---
<div className="flex,justify-center,pt-16,pb-2">

![CIRCLE Cyber](https://docs.circle-cyber.com/logo_black.png)
  ![CIRCLE Cyber](https://docs.circle-cyber.com/logo_white.png)

</div>

<u-page-hero>
<template v-slot:title="">

CIRCLE Documentation

</template>

<template v-slot:description="">

Open-source tools built by CIRCLE Cyber — private PKI infrastructure, real-time development frameworks, and cybersecurity utilities for air-gapped environments and production deployments.

</template>

<template v-slot:links="">
<u-button color="neutral" size="xl" to="https://docs.circle-cyber.com/docs/contributing" trailing-icon="i-lucide-book-open">

Contribute

</u-button>

<u-button color="neutral" size="xl" to="https://github.com/circle-rd" icon="i-simple-icons-github" target="_blank" variant="outline">

GitHub

</u-button>
</template>
</u-page-hero>

<u-page-section>
<template v-slot:title="">

Infrastructure

</template>

<template v-slot:description="">

Identity, private PKI, TLS routing and internal DNS — self-hosted, with no cloud or internet dependency.

</template>

<template v-slot:features="">
<u-page-feature description="Self-hosted OAuth 2.1 / OIDC identity provider. Multi-app RBAC, MFA (TOTP + passkeys) and passwordless sign-in, subscription plans with feature flags, consumption tracking, a prepaid credit wallet with an optional LiteLLM LLM gateway, organizations, social login, login history, and MCP server integration." icon="i-lucide-shield-check" title="Auth Service" to="https://docs.circle-cyber.com/auth-service/">



</u-page-feature>

<u-page-feature description="TLS/SNI passthrough router built on HAProxy. Route HTTPS traffic from a single public IP to multiple backends by hostname — without decrypting anything." icon="i-lucide-network" title="SNI Router" to="https://docs.circle-cyber.com/sni-router/">



</u-page-feature>

<u-page-feature description="Internal DNS server combining CoreDNS and docker-gen. Resolves *.your.domain to your host IP and auto-registers every running container by name." icon="i-lucide-search" title="DNS Resolver" to="https://docs.circle-cyber.com/dns-resolver/">



</u-page-feature>

<u-page-feature description="Self-hosted Certificate Authority. Issue, renew, and revoke X.509 certificates via ZMQ. Supports custom certificate profiles, CRL generation, and OCSP checks." icon="i-lucide-shield" title="uPKI CA" to="https://docs.circle-cyber.com/upki-ca/">



</u-page-feature>

<u-page-feature description="ACME v2 Registration Authority (RFC 8555). Plug Traefik, cert-manager or any ACME client into your private CA — no Let's Encrypt required." icon="i-lucide-key-round" title="uPKI RA" to="https://docs.circle-cyber.com/upki-ra/">



</u-page-feature>

<u-page-feature description="Python client for the µPKI stack. Enroll EC P-256 certificates via ACME v2, automate renewal with systemd, and install certs into Firefox and Chrome." icon="i-lucide-terminal" title="uPKI CLI" to="https://docs.circle-cyber.com/upki-cli/">



</u-page-feature>
</template>
</u-page-section>

<u-page-section>
<template v-slot:title="">

Development

</template>

<template v-slot:description="">

TypeScript frameworks and libraries for building real-time, authenticated backend applications.

</template>

<template v-slot:features="">
<u-page-feature description="TypeScript framework combining Fastify (HTTP) and Socket.IO (WebSocket) behind a single API. Services, Controllers, Managers, Watchers, and Middlewares." icon="i-lucide-server" title="IOServer" to="https://docs.circle-cyber.com/ioserver/">



</u-page-feature>

<u-page-feature description="Drop-in OIDC/OAuth2 JWT middleware set for IOServer. Protects HTTP routes and Socket.IO namespaces via remote JWKS — no secret storage on the application side." icon="i-lucide-lock" title="IOServer OIDC" to="https://docs.circle-cyber.com/ioserver-oidc/">



</u-page-feature>
</template>
</u-page-section>

<u-page-section>
<template v-slot:title="">

Cyber

</template>

<template v-slot:description="">

Offensive and defensive security tooling.

</template>

<template v-slot:features="">
<u-page-feature description="LLM-driven reverse engineering — an autonomous agent pilots headless Ghidra through 230+ MCP tools and delivers a Markdown report. Curated workflows, per-function auto-enhance, binary comparison, cross-binary recall, and REST / MCP / A2A access." icon="i-lucide-scan-search" title="RE:GINE" to="https://docs.circle-cyber.com/gine/">



</u-page-feature>

<u-page-feature description="Syscall factory generating Windows syscall bypasses in C, C++, NIM, and Rust — 7 gate iterators, 4 caller methods, symbol scrambling, and MCP server integration." icon="i-lucide-syringe" title="Sysplant" to="https://docs.circle-cyber.com/sysplant/">



</u-page-feature>

<u-page-feature description="Shellcode Factory generating PIC shellcode for Windows and Linux from reusable NASM snippets — recipes, pluggable XOR/chunk encoders, 9 output formats, and an MCP server." icon="i-lucide-code" title="ShellSnip" to="https://docs.circle-cyber.com/shellsnip/">



</u-page-feature>

<u-page-feature description="AV/EDR-evasion payload factory injecting shellcode into Windows and Linux processes — 31+7 techniques, SysPlant syscalls, obfuscation, environmental keying, and DLL proxying." icon="i-lucide-target" title="PayloadFactory" to="https://docs.circle-cyber.com/payloadfactory/">



</u-page-feature>

<u-page-feature description="Headless cross-platform raw-HID shell payload for the Vandal agent — spawns a local OS shell and pumps bytes over 64-byte raw HID reports, no network, no console window." icon="i-lucide-terminal" title="HID-Shell" to="https://docs.circle-cyber.com/hid-shell/">



</u-page-feature>
</template>
</u-page-section>

## Resources for Agents

- [API catalog: every service document this site publishes](https://docs.circle-cyber.com/.well-known/api-catalog)
- [Sitemap (XML)](https://docs.circle-cyber.com/sitemap.xml)
- [Sitemap (Markdown): every page on the site](https://docs.circle-cyber.com/sitemap.md)
- [MCP server card: MCP endpoint at https://docs.circle-cyber.com/mcp](https://docs.circle-cyber.com/.well-known/mcp/server-card.json)
- [MCP endpoint (streamable HTTP)](https://docs.circle-cyber.com/mcp)
- [llms.txt: index of the documentation for LLMs](https://docs.circle-cyber.com/llms.txt)
- [llms-full.txt: the full documentation as a single file](https://docs.circle-cyber.com/llms-full.txt)
- [OpenAPI document: every route this site serves to agents](https://docs.circle-cyber.com/openapi.json)


## Sitemap

See the full [sitemap](https://docs.circle-cyber.com/sitemap.md) for all pages.