# Domor

*/Startups/Domor*

## Startup Overview

This authorization engine validates user permissions directly at the network edge. Instead of routing requests back to a central database to check access rights, it processes authentication and routing rules locally on distributed edge workers.

Application architects use the system to eliminate the latency penalties inherent in remote permission checks. When highly distributed applications rely on global endpoints, forcing every user interaction to wait for a database round-trip degrades performance and creates fragile bottlenecks.

Legacy identity providers like Auth0 and AWS Cognito trap authorization inside stateful, regional servers through centralized API polling. This architecture bypasses those choke points by remaining entirely stateless. Deployable via edge-native APIs, it executes secure permission validations instantly at the perimeter, keeping data processing strictly at the user's location.

## Startup Founding Hypothesis

**Approach**: that validates user permissions directly at the edge
**Competitors**:
- [Auth0](/Competitors/Auth0)
- [AWS Cognito](/Competitors/AWS_Cognito)
- [centralized API polling](/Competitors/centralized_API_polling)
**Differentiator2x2**: deployable via edge-native APIs and entirely stateless

## Startup Solution Coordinate

**Solution**: [EdgeGate Validator](/Software/EdgeGate_Validator)

## Startup Position2x2

```mermaid
quadrantChart
    x-axis Centralized Infrastructure --> Edge-Native APIs
    y-axis Stateful Authorization --> Entirely Stateless
    Auth0: [0.3, 0.4]
    AWS Cognito: [0.2, 0.2]
    Centralized API Polling: [0.1, 0.1]
    Domor: [0.9, 0.9]
```

## Startup Offer

**Proof**:
- Targeting sub-10ms p99 latency across all globally distributed applications
- Aiming to offload up to 90% of permission-check database reads from origin servers
- Designed to run as a stateless middleware layer without requiring identity migration
**Tiers**:
- Name: Edge Developer · Price: ~$0.02–$0.05 per 10,000 validations · Inclusions: Stateless edge validation for up to 5 million requests per month, basic WASM deployment across major edge networks, and standard community support
- Name: Global Scale · Price: ~$0.01–$0.03 per 10,000 validations · Inclusions: Unlimited edge validations, real-time token revocation using edge-propagated bloom filters, and prioritized edge-agnostic API routing
- Name: Enterprise Dedicated · Price: Enterprise: ~$15k–$30k/yr · Inclusions: Custom edge network integrations, dedicated support channel, guaranteed sub-10ms latency SLAs, and custom deployment architectures for legacy identity stacks
**Guarantee**: Offers a guaranteed sub-10ms global edge validation latency, providing a full month's platform credit if average response times exceed the threshold.
**Business Function**: ProvideService
**Objection Handlers**:
- Cannot instantly revoke tokens without state: Domor is designed to utilize edge-propagated bloom filters to process instant token revocations without requiring centralized database lookups.
- Creates vendor lock-in with a specific edge provider: Domor ships as a standard WASM binary designed to run seamlessly across any edge-compute provider, including Cloudflare, Fastly, and Vercel.
- Requires ripping out our existing Auth0 setup: Domor functions as a stateless middleware layer that sits directly in front of your existing Identity Provider, requiring zero user migration.
**Pricing Architecture**: UsageMeter
**Agent Checkout Support**:
- agentic-commerce-protocol

## Startup Brand

**Voice**: Technical and precise, favoring architectural clarity and unvarnished developer facts.
**Tagline**: Stateless user permissions validated instantly at the network edge.
**Icon Concept**: turnstile
**Palette Intent**: electric-signal
**Visual Identity**: Sharp neon green accents against deep slate backgrounds combine with monospaced terminal typography and stark motifs of physical boundary lines to reflect immediate edge-node verification.
**Archetype Reference**: the-ruler

## Startup Buyer Chain

**Chain**: Domor → Platform Engineers → Application Developers → End Users
**Gtm Motion**: Acquires developers through self-serve adoption for individual edge-worker projects via an API-request volume free tier. Expands contract value when enterprise IAM teams mandate the tool for cross-portfolio permission standardization.
**Agent Channel**: Designed to publish OpenAPI specifications to developer-agent registries, such as GitHub Copilot extension directories and LangChain tool catalogs, allowing AI coding assistants to automatically discover and implement the edge validation module during application scaffolding.
**Primary Channel**: Developer discovery through intended listings in edge computing integration ecosystems, specifically targeting Vercel Integrations and Cloudflare Worker templates to capture search intent for stateless authentication.

## Startup Customer Journey

```mermaid
flowchart LR; A[Edge Integration Directory] --> B[API Free Tier]; B --> C[WASM Edge Binary]; C --> D[Stateless Middleware]; D --> E[Enterprise IAM Team]; E --> F[Global Scale Tier]; F --> G[Edge-Propagated Bloom Filter];
```

## Startup Proof Points

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**Pilot Goals**:
- 30-day shadow traffic pilot with a high-volume API provider, aiming to prove sub-10ms latency on 20 percent of traffic without impacting the existing identity provider.
- 14-day token revocation drill with a fintech platform, aiming to validate that edge-propagated bloom filters block invalid tokens globally without origin database queries.
**Target Metrics**:
- Target: Sub-10ms p99 latency for global authorization checks
- Target: 90 percent reduction in origin database reads for permission validations
- Target: Zero user migrations required to implement the middleware layer
- Target: Sub-second global propagation time for token revocations
**Target Case Studies**:
- Target: A global e-commerce platform minimizes origin database load by offloading permission checks to the edge, surviving flash sales without backend scaling.
- Target: A B2B SaaS application deploys instant token revocation via bloom filters for enterprise compliance without adding latency to global API calls.
- Target: A streaming media provider ensures consistent sub-10ms global latency for user authorization, removing centralized authentication bottlenecks.
**Testimonial Targets**:
- VP of Engineering: Validates the drop in database load during peak traffic without requiring a rewrite of the existing Auth0 stack.
- Chief Information Security Officer: Confirms instant token revocation meets compliance requirements without relying on centralized database lookups.
- Lead DevOps Engineer: Highlights the ease of deploying the stateless WASM binary across Vercel and Cloudflare without provider lock-in.

## Startup Top Risks

**Risks**:
- Severity: existential · Description: Edge platform providers like Cloudflare or Fastly deprecate or severely restrict the compute APIs required for stateless permission validation. · Mitigation Status: unmitigated
- Severity: high · Description: Enterprise compliance teams reject stateless architecture due to the inability to guarantee instant, synchronous global revocation of compromised sessions. · Mitigation Status: in-progress
- Severity: high · Description: Auth0 or AWS Cognito release native edge-caching extensions that match edge latency while keeping their legacy centralized control planes. · Mitigation Status: unmitigated
- Severity: moderate · Description: Cryptographic payload sizes for complex ABAC policies exceed edge worker memory limits, forcing a fallback to centralized database lookups. · Mitigation Status: in-progress
- Severity: moderate · Description: Developers refuse to rewrite their existing centralized database permission queries to fit a stateless edge token model. · Mitigation Status: unmitigated

## Startup Competitors

- [Auth0](/Competitors/Auth0) — Incumbent
- [AWS Cognito](/Competitors/AWS_Cognito) — Cloud Incumbent
- [Centralized API Polling](/Competitors/Centralized_API_Polling) — Status Quo
- [Clerk Authentication](/Competitors/Clerk_Authentication) — Developer Auth
- [Oso Cloud](/Competitors/Oso_Cloud) — Policy Engine

## Startup Solution Stack

- [Stateless Authorization Service](/Services/Stateless_Authorization_Service) — Service-as-Software
- [Edge Validation Agent](/Agents/Edge_Validation_Agent) — Agent
- [Token Verification API](/Software/Token_Verification_API) — Software
- [Edge Integration SDK](/Software/Edge_Integration_SDK) — Software

## Startup Story Brand

**Hero**:
- **Need**: to be the architect of a resilient system, not the one fixing latency spikes
- **Want**: to validate user permissions without hitting the central database on every request
- **Identity**: the backend engineer at a global SaaS platform
**Plan**:
- Step: Review · Detail: Specify your required permissions and resource scopes in a simple JSON manifest.
- Step: Inspect · Detail: Validate the stateless bloom filters that handle instant token revocations across all edge nodes.
- Step: Deploy · Detail: Ship the Domor binary as a middleware layer to Cloudflare, Fastly, or Vercel.
**Guide**:
- **Empathy**: When your Cloudflare Workers time out waiting for an AWS Cognito response, your users see a spinning wheel instead of your app.
**Problem**:
- **Villain**: centralized API polling
- **External**: Every permission check forces a round-trip to a central database or Auth0 API, adding hundreds of milliseconds to Vercel and Cloudflare functions.
- **Internal**: You feel trapped between maintaining security and delivering the sub-second performance your users expect.
- **Philosophical**: Edge computing was built for local execution, not for waiting on a single-region identity server.
**Success**: Permissions resolve in under 10ms at the edge, offloading 90% of auth traffic from your origin database.
**One Liner**: Every request, backend engineers face identity-driven latency. Domor validates permissions instantly at the network edge so global apps stay fast and resilient.
**Positioning**:
- **So That**: validate user access in sub-10ms without hitting origin databases
- **Unlike**: Auth0 or AWS Cognito polling
- **For Whom**: backend engineers at global SaaS platforms
- **Category**: Edge-native permission validation
**Call To Action**:
- **Direct**: Deploy WASM binary
- **Transitional**: View edge latency benchmarks
**Failure Stakes**:
- 100ms+ latency penalties
- Origin server database exhaustion
- Regional identity provider outages
**Transformation**:
- **To**: the infrastructure's performance architect
- **From**: a developer struggling with Auth0 latency
**Controlling Idea**: Identity validation belongs at the edge where the user lives.

## Startup Landing Hero

**Eyebrow**: Edge-native authorization engine
**Headline**: Validate user permissions in under 10ms
**Supporting Proof**: WASM-native engine built for Cloudflare, Fastly, and Vercel

## Startup Landing Problem

**Cards**:
- Body: You call the Auth0 /userinfo endpoint or fetch JWKS sets from Cloudflare Workers. Each request adds 100ms+ of cold-start and network latency, negating the speed of your edge deployment while driving up external API costs and rate-limit risks. · Heading: Polling Auth0 for every request
- Body: You maintain a global Redis instance to cache permissions, but cross-region lookups from AWS or Fastly still hit a performance wall. Scaling these clusters to meet global traffic requires complex synchronization and creates a single point of failure. · Heading: Storing session state in Redis clusters
- Body: You stuff every user permission into the JWT claim to avoid database lookups. This creates massive headers that bloat request sizes and leaves you with no way to revoke access instantly without forcing a complete user logout. · Heading: Hardcoding roles in JWT payloads
**Section Heading**: Your edge functions shouldn't wait on a central database

## Startup Landing Solution

**Section Heading**: Eliminate database round-trips from your identity architecture
**Solution Statement**: Domor is an edge-native permission engine designed to run as a WASM-native middleware. It uses stateless bloom filters to validate user access rights locally on Cloudflare Workers or Fastly Compute, intended to remove the dependency on centralized Auth0 or AWS Cognito API calls.

## Startup Landing Features

**Benefits**:
- Detail: By executing directly at the edge, you stop waiting for round-trips to aws cognito or auth0. · Benefit: Eliminate 100ms+ latency on user requests · Feature: stateless wasm-native validation for cloudflare workers, fastly, and vercel functions
- Detail: Domor handles up to 90% of your authorization traffic locally, preventing database exhaustion during traffic spikes. · Benefit: Protect origin databases from auth traffic · Feature: permission-check offloading via edge-native permission validation and token verification apis
- Detail: Invalidate sessions immediately across your global footprint without requiring a centralized stateful lookup. · Benefit: Revoke user access instantly without state · Feature: real-time token revocation using edge-propagated bloom filters across all nodes
- Detail: Keep your current auth0 or aws cognito setup while moving the validation logic to the edge. · Benefit: Maintain security without a user migration · Feature: stateless middleware layer that sits in front of existing identity providers
- Detail: Run the same authorization manifests across different compute providers without writing custom provider-specific code. · Benefit: Standardize auth across multiple edge networks · Feature: edge-agnostic binary deployment for uniform logic on vercel and fastly
**Section Heading**: Achieve sub-10ms global permission checks without hitting your origin database

## Startup Landing Social Proof

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**Section Heading**: Edge-native infrastructure built for sub-10ms global permission validation
**Capability Claims**:
- Validates permissions at the network edge with sub-10ms p99 latency using a WASM-native engine.
- Offloads up to 90% of permission-check database reads from your origin servers.
- Runs as a stateless middleware layer without requiring user migrations from existing identity providers.
- Processes instant token revocations globally using edge-propagated bloom filters without centralized lookups.
**Foundation Signals**:
- WASM-native binary compatible with Cloudflare Workers, Fastly Compute, and Vercel Edge Runtime
- Integrates directly with existing Auth0 and AWS Cognito identity stacks via stateless middleware
- Built for zero-trust security architectures requiring distributed, state-free authorization

## Startup Landing Pricing

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**Tiers**:
- Name: Edge Developer · Price: ~$0.02–$0.05 per 10,000 validations · Tagline: For teams launching low-latency apps on Vercel or Cloudflare · Cta Label: Deploy WASM binary · Highlighted: false
- Name: Global Scale · Price: ~$0.01–$0.03 per 10,000 validations · Tagline: For high-traffic platforms eliminating origin database auth bottlenecks · Cta Label: Connect data · Highlighted: true
- Name: Enterprise Dedicated · Price: Enterprise: ~$15k–$30k/yr · Tagline: For complex architectures requiring custom integrations and dedicated support · Cta Label: Get started · Highlighted: false
**Billing Note**: Usage-metered pricing — illustrative bands shown until this Startup is live.
**Section Heading**: Scale your identity layer without the latency

## Startup Landing Faq

**Faqs**:
- Answer: We use edge-propagated bloom filters to synchronize revocation lists across all global nodes. This allows the system to check a compressed representation of blocked tokens locally without performing a centralized database lookup. · Question: How can you instantly revoke access if the system is stateless?
- Answer: No. The system ships as a standard WASM binary that runs on any edge-compute environment including Cloudflare Workers, Fastly Compute, or Vercel Functions. You can migrate your infrastructure between providers without changing your permission logic. · Question: Will I be locked into a specific edge provider like Cloudflare?
- Answer: You keep your existing identity provider exactly as it is. This software acts as a stateless middleware layer that validates JWTs and resource scopes at the edge, meaning you do not have to move your user records or auth settings. · Question: Do I have to migrate my users from Auth0 or AWS Cognito?
- Answer: Yes, it removes the round-trip latency to your central server by executing the validation logic in the same data center as the user. We guarantee a sub-10ms p99 global latency and provide platform credits if the system exceeds that threshold. · Question: Is this actually faster than just calling my origin database?
- Answer: The system inherits the multi-region redundancy of your chosen edge provider. Since the validation is stateless and distributed across hundreds of points of presence, a failure in one region does not affect the availability of permission checks in another. · Question: What happens if the edge network itself goes down?
**Section Heading**: Questions about Edge Permission Validation

## Startup Token Hero

**Genre**: founding-hypothesis
**Rendered**: Every request, backend engineers face identity-driven latency. Domor validates permissions instantly at the network edge so global apps stay fast and resilient.
**Mechanism**: spine-derived-v1
**Template Id**: spine-founding-hypothesis
**Vocab Fingerprint**: bbbe53ce239464d6

## Startup Token Positioning

**Genre**: moore-positioning
**Rendered**: Edge-native permission validation for backend engineers at global SaaS platforms. Unlike Auth0 or AWS Cognito polling — validate user access in sub-10ms without hitting origin databases.
**Mechanism**: spine-derived-v1
**Template Id**: spine-moore-positioning
**Vocab Fingerprint**: 33a12b0abd70fe00

## Startup Token Pitch Deck

**Genre**: pitch-deck
**Rendered**: Problem: Every permission check forces a round-trip to a central database or Auth0 API, adding hundreds of milliseconds to Vercel and Cloudflare functions.
Solution: Every request, backend engineers face identity-driven latency. Domor validates permissions instantly at the network edge so global apps stay fast and resilient.
Customer: backend engineers at global SaaS platforms
Unlike: Auth0 or AWS Cognito polling
**Mechanism**: spine-derived-v1
**Template Id**: spine-pitch-deck
**Vocab Fingerprint**: a731d631f1c3c04e

## Startup Token M E D D P I C C

**Pain**: Every permission check forces a round-trip to a central database or Auth0 API, adding hundreds of milliseconds to Vercel and Cloudflare functions.
**Metrics**: Target: Permissions resolve in under 10ms at the edge, offloading 90% of auth traffic from your origin database.
**Rendered**: Pain: Every permission check forces a round-trip to a central database or Auth0 API, adding hundreds of milliseconds to Vercel and Cloudflare functions.
Economic buyer: Platform Engineers
Metrics: Target: Permissions resolve in under 10ms at the edge, offloading 90% of auth traffic from your origin database.
Competition: Auth0 or AWS Cognito polling
**Mechanism**: spine-derived-v1
**Competition**: Auth0 or AWS Cognito polling
**Economic Buyer**: Platform Engineers
**Vocab Fingerprint**: 1535f0c93d3427a8

## Startup Token Cold Email

**Genre**: cold-email
**Rendered**: Subject: Edge-native permission validation for backend engineers at global SaaS platforms

backend engineers at global SaaS platforms — Every permission check forces a round-trip to a central database or Auth0 API, adding hundreds of milliseconds to Vercel and Cloudflare functions. Every request, backend engineers face identity-driven latency. Domor validates permissions instantly at the network edge so global apps stay fast and resilient.
**Mechanism**: spine-derived-v1
**Template Id**: spine-cold-email
**Vocab Fingerprint**: 425b259390ddbc26

## Startup Token Agent Spec

**Genre**: ai-agent-spec
**Rendered**: Edge-native permission validation. Every request, backend engineers face identity-driven latency. Domor validates permissions instantly at the network edge so global apps stay fast and resilient. Serves backend engineers at global SaaS platforms.
**Mechanism**: spine-derived-v1
**Template Id**: spine-ai-agent-spec
**Vocab Fingerprint**: e30073705816ca55

## Neighborhood

### Candidate solutions

- [forecast not anchored to the budget baseline the team set](/Problems/forecast_not_anchored_to_the_budget_baseline_the_team_set) — candidate solution for · Problems
- [Anti-Bot Defense Evasion](/Problems/Anti-Bot_Defense_Evasion) — candidate solution for · Problems
- [Scale Faculty Credential Audits](/Problems/Scale_Faculty_Credential_Audits) — candidate solution for · Problems
- [Unbillable Tax Data Extraction](/Problems/Unbillable_Tax_Data_Extraction) — candidate solution for · Problems

### Composed of

- [Edge Validation Agent](/Agents/Edge_Validation_Agent) — composes · Agents
- [Token Verification API](/Software/Token_Verification_API) — composes · Software
- [Stateless Authorization Service](/Services/Stateless_Authorization_Service) — composes · Services
- [Edge Integration SDK](/Software/Edge_Integration_SDK) — composes · Software

### Embodies

- [Software](/Theses/Software) — embodies · Theses

### What it offers

- [EdgeGate Validator](/Software/EdgeGate_Validator) — offers · Software

### Competitors

- [AWS Cognito](/Competitors/AWS_Cognito) — competes with · Competitors
- [centralized API polling](/Competitors/centralized_API_polling) — competes with · Competitors
- [Auth0](/Competitors/Auth0) — competes with · Competitors
- [Oso Cloud](/Competitors/Oso_Cloud) — competes with · Competitors
- [Clerk Authentication](/Competitors/Clerk_Authentication) — competes with · Competitors

### Similar Startups

- [Authairie](/Startups/Authairie) — similar · Startups
- [Granie](/Startups/Granie) — similar · Startups
- [Granooling](/Startups/Granooling) — similar · Startups
- [Gatesphere](/Startups/Gatesphere) — similar · Startups
- [Halolayer](/Startups/Halolayer) — similar · Startups
- [Luminousgate](/Startups/Luminousgate) — similar · Startups
- [Octity](/Startups/Octity) — similar · Startups
- [Problematic](/Startups/Problematic) — similar · Startups
- [Staborus](/Startups/Staborus) — similar · Startups
- [Edgelock](/Startups/Edgelock) — similar · Startups
- [Coregate](/Startups/Coregate) — similar · Startups
- [Capabilityhaven](/Startups/Capabilityhaven) — similar · Startups
- [Accibe](/Startups/Accibe) — similar · Startups
- [Frontierhaven](/Startups/Frontierhaven) — similar · Startups
- [Boundeam](/Startups/Boundeam) — similar · Startups
- [Autucid](/Startups/Autucid) — similar · Startups
- [Apexpoint](/Startups/Apexpoint) — similar · Startups
- [Abjuratory](/Startups/Abjuratory) — similar · Startups
- [Weavermanor](/Startups/Weavermanor) — similar · Startups
- [Archos](/Startups/Archos) — similar · Startups