show vemzio · 5 min read · 3 days ago
Show Vemzio: CloudSync Pro — Zero-knowledge client-side encryption for SaaS database backups
A
Alex Müller @alexm
Founder of CloudSync Pro
✓ $12.5k MRR
⚡ 82
We built an automated cloud backup service where the server never sees the plaintext encryption keys. Built with AES-GCM-256 and WebCrypto.
Most backup SaaS providers store unencrypted database dumps or hold the master private keys on their own AWS KMS instance. If their infrastructure is compromised, customer data is leaked.
With CloudSync Pro, we designed a zero-knowledge protocol:
### Cryptographic Workflow
1. Client generates ephemeral 256-bit AES-GCM master key in browser memory via WebCrypto API.
2. Stream chunks are encrypted on the agent before leaving customer VPC.
3. Vemzio or AWS S3 only stores encrypted ciphertext and HMAC validation checksums.
We currently protect 890+ paying organizations with verified $12.5k MRR. Feedback and architectural criticism welcome.
#Security
#Cryptography
#SaaS
#TypeScript