Station70

Station70 develops institutional-grade security products aimed at protecting enterprise assets that it describes as irreplaceable: cryptographic keys, identities and access. Its product line includes Bunker, a private key backup and recovery service, and Gatekeeper, which provides identity and agent access control together with a secrets vault. The company states that its security standard was established protecting digital assets and is now applied more broadly across enterprise use cases.

Bunker is built so that Station70 cannot access customer private keys: backups are encrypted by wallet providers before reaching Station70, and decryption keys are split between customer-controlled hardware and Station70 hardware security modules. Recovery is customer-controlled and requires a quorum held only by the customer's team, using customer-managed hardware keys that hold the cryptographic material for decryption and Yubikeys as the operator authentication factor. Bunker has direct API integrations with Fireblocks, Fordefi and Utila, and supports institutional MPC-based wallets.

Gatekeeper's secrets vault stores API keys, tokens and other credentials encrypted at rest and releases them only under policy at the moment of use. Human and agent requests authenticate through a gateway, and the required secret is injected into the session with scoped, time-bound permissions so that long-lived credentials are not exposed to agents or written into plaintext configuration. Every retrieval is logged to produce an audit trail.