MastHead
Labelled Secure Messaging
New
Connect layer

What if a chat room knew its own sensitivity, and only the right people could ever join it?

Secure messaging where policy decides who sees what.

Book a Demonstration Get the Datasheet
  • Secure messaging
  • Labelled rooms
  • Policy-decided access
  • Matrix
Platform ConsiliumRippleWatchkeeperPulse SentinelCognisightByteHarbourHarbour GuardMastHeadWayForgeRibbonFlow
DCS Part of Espanaro data-centric security. MastHead applies the same labels and policy decisions to conversation as ByteHarbour applies to data.

What it does

System behaviour

MastHead brings data-centric security to conversation. Rooms carry a label, HarbourGuard decides who may join, and every decision is recorded.

MastHead is secure messaging built on the open Matrix standard. Users sign in through their organisation's own identity provider. Every room carries a sensitivity label, and HarbourGuard decides from each user's attributes whether they may join. Every access decision is recorded in a verifiable audit trail, so teams and partners can talk in real time without losing control of who heard what.

Position in the ecosystem: MastHead uses HarbourGuard for access decisions and ByteHarbour labelling, so conversation follows the same data-centric security rules as documents, feeds and tracks. Consilium alerts and playbooks can open the right room for the right people.

Three principles

Data-centric security for conversation

Labelled

Every room carries a sensitivity label, so the conversation knows how it must be handled.

Policy-decided

HarbourGuard decides who may join from each user's attributes, not from a hand-kept list.

Recorded

Every decision is written to a verifiable audit trail.

The challenge

Teams coordinate operations in chat, but most chat tools have no idea how sensitive a conversation is.

Membership is managed by hand, so the wrong person can end up in the wrong room, and there is no reliable record of who could see what.

Operational value

MastHead delivers:

  • Rooms carry a sensitivity label
  • Access decided by policy, not by hand
  • Sign in with your own identity provider
  • Verifiable audit trail
  • Built on the open Matrix standard
New

MastHead is a new Espanaro product, built and working end to end, with server-enforced policy and audit. It is ready to deploy with your teams.

Architecture

How it works

MastHead works in four steps, from sign in to record.

MASTHEAD · LABELLED SECURE MESSAGING 01 SIGN IN Through your organisation's identity provider 02 LABEL Each room carries a sensitivity label 03 DECIDE HarbourGuard checks the user's attributes 04 RECORD Every decision is auditable SECURE MESSAGING · LABELLED ROOMS · POLICY-DECIDED ACCESS · MATRIX
  1. 01Sign inThrough your organisation's identity provider
  2. 02LabelEach room carries a sensitivity label
  3. 03DecideHarbourGuard checks the user's attributes
  4. 04RecordEvery decision is auditable

Demonstration

MastHead secure messaging

Users sign in through their organisation's identity provider, rooms carry a sensitivity label, HarbourGuard decides who may join, and every decision is recorded. Demonstration environment. All demonstrations

Capabilities

What MastHead does

Secure messaging on the open Matrix standard
Sign-in through the organisation's own identity provider
Sensitivity labels on every room
Room membership decided by HarbourGuard policy
Access based on user attributes such as clearance, role and organisation
Verifiable audit trail of every access decision
Works alongside ByteHarbour protected sharing
Designed for multi-organisation and coalition teams

Use cases

Where MastHead makes the difference

01

Operations rooms

Coordinate an incident with only the people entitled to take part.

02

Partner and coalition working

Share a room with another organisation under a common label.

03

Counter-drone and site security

Give the guard force a labelled room for each incident.

04

Sensitive projects

Keep programme conversations to the right cleared team.

Integration and deployment

How MastHead connects

MastHead uses open standards and the Espanaro policy layer.

Works withHarbourGuardByteHarbourConsiliumOrganisation identity providersMatrix
Integration areaSupported approach
MatrixBuilt on the open Matrix messaging standard.
IdentityUsers sign in through their organisation's identity provider.
HarbourGuardDecides who may join each labelled room, from user attributes.
AuditEvery access decision is recorded in a verifiable audit trail.

Delivered with Espanaro

Built and supported in the UK

Supported by Espanaro capability

The engineering teams behind MastHead also support its integration, deployment and operation.

How to engage

  1. 1
    Discovery

    Understand who needs to talk, across which organisations and at what sensitivity.

  2. 2
    Integration Workshop

    Shape labels, policies and identity integration around your teams.

  3. 3
    Deploy

    Run MastHead with your teams and move into operational use, with UK support.

Solution datasheet

Download the MastHead Datasheet

A concise technical overview of MastHead: capabilities, use cases, integration and deployment. Fill in your details and the datasheet unlocks immediately.

  • Technical capability summary
  • Operational use cases and deployment context
  • Integration and ecosystem overview
  • PDF, free to download

Access Datasheet

Free to download. We do not sell your details.

Discuss MastHead

Discuss how MastHead can support your mission

Tell us about your operational requirement. We will respond with clarity on how MastHead fits your environment and what deployment looks like.

Book a Demonstration View All Solutions