Identity continuity · traffic-only · no tracking

We don't watch you. We recognize you.

Proksimity knows whether it's really you on this device — or someone pretending to be — by listening only to the way your browser already talks. No client script, no payload capture, no surveillance.

session 0x4f2arecognized ✓

the knock — the traffic's rhythm, not its contents

0ms
p95 decision latency
0MB
memory footprint
0h
feature retention
0min
raw edge metadata

Why now

The old ways of knowing who's who are dying.

Websites used to remember you with cookies and client-side fingerprinting. That toolkit is being removed, one vendor at a time — and credential-only auth can't catch a stolen session.

Being removed

Third-party cookies

Blocked or user-gated by Apple ITP, Firefox ETP, and Chrome's user-choice model.

Being killed

Client fingerprinting

The OS, hardware, and plugin APIs it relied on are being shut by the same vendors.

The answer

Read the knock

Identity signal from artifacts the browser emits regardless — nothing installed, nothing extra.

How it works

Know the knock.

Recognize the person by the rhythm, not by reading their mail.

01

Watch the knock

At the edge, observe only traffic artifacts — TLS ClientHello, header order and casing, HTTP/2/3 and QUIC session behavior, WebSocket frame timing. Raw payloads are never read.

02

Score the rhythm

Turn each session into a bounded feature vector (~35 features, missing values marked — never guessed). One vector per session, within half a second of it ending.

03

Learn who knocks alike

Link sessions to an anonymous identity graph via embeddings and calibrated thresholds — so the same person is recognized across their phone and laptop.

04

Verify when unsure

When confidence is low, don't guess — step up. Ask for WebAuthn, an OTP, or a one-time code. The link gates step-up; it never grants auth alone.

The promises

Privacy isn't a disclaimer. It's the product.

No content, ever

No passwords, no messages, no query strings, no bodies. We never read or store what you send.

Nothing installed

No client script, no OS API, no hardware identifier. We use only what the network stack already emits.

Fails toward step-up

Every uncertain case degrades to a prompt, never to silent acceptance. We'd rather ask than wrongly trust.

Data doesn't linger

Features live under a day; raw edge metadata under 15 minutes. The graph decays, it doesn't accumulate.

The decision

Calibrated, not vibes.

Every session lands on a calibrated risk band. The system never invents certainty — it reports the band and acts accordingly.

Full ≥ 0.92Step-up 0.80Restricted 0.70Reject < 0.70
latency p95 ≤ 250 ms footprint 1 core · ≤ 64 MB precision ≥ 0.95 recall ≥ 0.90

Built with

Fast where it matters, quiet everywhere else.

Goserving path · static binaries
JavaScript≤ 4 KB beacon · optional
Pythontraining only · ships as ONNX

Early access

Recognize your people. Leave their privacy alone.

Proksimity is in early development. Tell us where you run auth, and we'll show you the knock.

Request early access