StateNull is one app for encrypted calling, video conferencing, chat and file sharing. Find anyone by their @handle, connect instantly, and stay protected end to end — with post-quantum cryptography built in.
Every call, message and file is encrypted on your device, relayed blind, and verifiable. The server never sees your content.
Capture or compose on-device
AES-256-GCM · per-device keys
Hash-chained, signed ledger
Call · chat · share over 443
Tamper-evident, provable
People and teams who can't afford a leak — government, defense, law enforcement, and privacy-first business.
1:1 and group calls with end-to-end encrypted media — even on restrictive networks.
Direct and group messaging where the server is a blind relay — it stores ciphertext it can never read.
Stand up secure conference rooms with screen share on your own self-hosted media server.
Share files and media end to end. The server only ever holds ciphertext it can't read, and you can revoke access at any time.
Pick a handle like @alex and be reachable for calls, chat, conferences and sharing — only if you choose to be discoverable.
Enrol BYOD and corporate devices, push policy, and lock or wipe remotely — signed, attested and tamper-resistant.
Security that's strong by default — and still works in the real world.
NIST ML-DSA (FIPS 204) hybrid signatures protect integrity and provenance against tomorrow's quantum attacks — crypto-agile and policy-controlled, with ML-KEM key exchange on the roadmap.
The server only ever holds ciphertext. Calls, chats and files are encrypted on your device — we can't read them, and neither can an attacker who breaches the server.
All call and video media is tunneled over TLS on port 443 with a pinned certificate — connectivity where other tools get blocked.
Enrol, secure and remotely control fleets — BYOD or corporate — without bolting on a separate MDM.
Run it as managed SaaS or fully air-gapped on your own hardware. Same product, same features.
Start a 14-day trial with just an email — a code signs you in, no password to leak. Enterprises get SSO and provisioning.
Modern, standards-based cryptography end to end — built to the algorithms agencies require, with zero-trust controls throughout.
Post-quantum signatures (ML-DSA) ship today, hybrid with classical crypto. ML-KEM key exchange (FIPS 203), SLH-DSA (FIPS 205) and a FIPS-validated module are on the roadmap. Content provenance is C2PA-inspired (RSA-PSS + ML-DSA signatures); full PAdES-B, RFC-3161 timestamps and invisible watermarking are on the roadmap. Built to support these standards; formal certification status varies by deployment — talk to us about your compliance requirements.
The same secure product, however you need to run it.
Multi-tenant, horizontally scalable, with an operator admin console, SSO federation, isolated per-tenant storage, fleet device management and audit.
Be up and running in a minute. Sign up with your email, get a code, pick your @handle, and start calling, chatting and sharing securely.
14-day free trial. No credit card, no password — just your email and a one-time code.