Question 1

What is Enravo?

Accepted Answer

Enravo is a technology company that builds software on its own infrastructure — Enravo Core. Every product we deliver runs on Core, so each one starts with identity, device control, and security already handled.

Question 2

What is Enravo Core?

Accepted Answer

Enravo Core is the platform underneath everything we ship. It gives every product a reliable operational foundation and a security layer that cannot be switched off — so products built on it start secure and stay secure.

Question 3

What is Rakton?

Accepted Answer

Rakton is our first product family, built on Enravo Core. It runs multi-branch commerce and delivery operations — ordering, delivery, campaigns, multi-channel sales, and real-time tracking — with back-office and POS products on the way.

Question 4

Who is Enravo for?

Accepted Answer

Any team building software that needs strong identity, device-level security, and API infrastructure it can rely on — SaaS platforms, mobile applications, multi-tenant systems, internal tools, or connected devices. Rakton proves it in commerce, but Enravo Core is not limited to commerce: it is a general-purpose foundation for any software that refuses to compromise on security.

Question 5

What makes Enravo different?

Accepted Answer

Three things. First, we built the security layer before we built any product — security is the architecture, not a feature added later. Second, every product we deliver runs on the same foundation, so Enravo Core becomes more battle-tested with every deployment. Third, we don't depend on third-party identity or security providers — the layers that protect you are built and maintained by us.

Question 6

Is Enravo a SaaS product?

Accepted Answer

No. Enravo is not a sign-up-and-use SaaS. Each deployment runs on dedicated infrastructure with its own data and its own security policies. We offer four engagement models: Solution Delivery, Product Adoption, Partnership, and Core Licensing (coming soon).

Question 7

Is Enravo open source?

Accepted Answer

No. Enravo Core is not open source. Partners get documentation, SDKs, and direct support from our team. Core Licensing, which will allow organizations to run Enravo Core on their own infrastructure, is on our roadmap.

Question 8

How do I get in touch?

Accepted Answer

Visit our contact page or email us directly. Whether you have a technical question, a partnership idea, or a project you want to discuss — we respond to every message.

Question 9

What does Enravo Core give my product?

Accepted Answer

A foundation where the hard parts are already solved: data, APIs, access control, and security. Your team focuses on what makes your product different; Enravo Core handles the rest.

Question 10

How much faster can we build on Enravo Core?

Accepted Answer

Significantly faster than starting from scratch. New products start on a foundation that is already running in production, so you don't rebuild identity, permissions, or security for every project.

Question 11

Can we add our own features?

Accepted Answer

Yes. Enravo Core is modular — new capabilities can be added, updated, or removed without disrupting the rest of your system.

Question 12

Can different roles see different data?

Accepted Answer

Yes. Access is controlled per role, down to individual fields, and changes take effect immediately. Sensitive values stay hidden from anyone who shouldn't see them.

Question 13

Does Enravo support multiple channels?

Accepted Answer

Yes. Web, mobile, desktop, and server integrations all connect to the same platform with the same security guarantees. Each channel gets its own rules and can be managed or switched off independently.

Question 14

Do partners get API documentation?

Accepted Answer

Yes. Approved partners receive the API reference, integration guides, and SDKs — and the documentation always matches the live API.

Question 15

What is Enravo Trust?

Accepted Answer

Enravo Trust is the security layer inside Enravo Core. It cannot be bypassed or switched off. It protects every product built on Core against stolen sessions, tampered apps, lost devices, abusive traffic, and unauthorized access — and keeps a full audit trail of every security event.

Question 16

What is Proof of Possession?

Accepted Answer

It is our guarantee that every request really comes from the device it claims to come from. The outcome: a stolen token is a useless token — whether it leaks from logs, a proxy, or a compromised network.

Question 17

What is Device Binding?

Accepted Answer

Every session belongs to a specific device, backed by hardware-level identity. Sessions cannot be moved to another device, each device can be revoked on its own, and you decide how many devices each user may use.

Question 18

What is App Integrity?

Accepted Answer

Only genuine, unmodified copies of your app can connect. Repackaged apps, emulators, and tampered devices are turned away — with platform-level app and device verification on Android and iOS.

Question 19

Can we set different security rules for different apps?

Accepted Answer

Yes. Each app, storefront, and integration gets its own rules — who can sign in, how much traffic is allowed, which networks can connect — and rules can be changed without touching your code.

Question 20

How are attacks handled?

Accepted Answer

Automatically. Brute-force attempts, credential stuffing, and other automated attacks are detected and contained without anyone on call. Every security event is recorded in your audit trail with full context.

Question 21

What happens if a token is stolen?

Accepted Answer

Nothing useful. A stolen token cannot be used from another device — the attacker is turned away, and the attempt is recorded.

Question 22

What happens if a user loses their phone?

Accepted Answer

Revoke that device and its access ends immediately. The user's other devices keep working, and the audit log shows who revoked it and when.

Question 23

What if someone copies or repackages our app?

Accepted Answer

It can't connect. Only genuine copies of your app are accepted — modified versions are rejected before they reach your data.

Question 24

What if someone tries to brute-force logins?

Accepted Answer

The attack is contained automatically and the source is locked out. Your real users keep signing in as normal.

Question 25

What if a partner integration leaks its credentials?

Accepted Answer

Switch that integration off on its own and the leaked credentials stop working immediately. Every other app and integration keeps running.

Question 26

What if someone captures our network traffic?

Accepted Answer

Captured requests cannot be replayed, and captured tokens cannot be reused from another device.

Question 27

Can a user have multiple devices?

Accepted Answer

Yes. You decide how many devices each user may use, and every device can be managed or revoked independently.

Question 28

How do we get started?

Accepted Answer

Tell us what you're building through our contact page. We'll scope it together and propose the right engagement model: Solution Delivery, Product Adoption, Partnership, or Core Licensing (coming soon).

Question 29

Do we have to rebuild our existing systems?

Accepted Answer

Not necessarily. We start from what you already run and agree on a path together — many projects begin by protecting a single app or integration.

Question 30

Does the security layer slow things down?

Accepted Answer

No. Protection runs on every request without a noticeable impact on your product's speed.

Question 31

How do I report a security issue?

Accepted Answer

We run a responsible disclosure program. Our disclosure policy explains how to report an issue and what you can expect from us.

Frequently asked questions.

About Enravo

Platform

Trust & Security

If this happens…

Working with Enravo

Still have questions?

Rakton

Enravo Trust