Architecture & product stack
How GENLOFT connects edge, identity, entitlements, and module stacks into one product.
1. Client → Edge
HTTPS terminates at the edge with WAF and rate limits. Operator access uses a zero-trust mesh.
2. Identity
OIDC issues tokens for the product and entitled modules. Step-up MFA for sensitive actions.
3. Control plane
Subscription → entitlement → provisioning. Access is never checked by plan name alone.
4. Module stacks
Entitled modules run in isolated containers. APIs aggregate into one dashboard.
5. Platform data
PostgreSQL, Redis, object storage, secrets vault, and security audit trail.
Edge & access
Edge proxy + WAF
TLS termination, OWASP rules, rate limits
Zero-trust mesh
WireGuard overlay for operator access
OIDC identity
SSO for the product and entitled modules
Control plane
Tenant control plane
Organizations, entitlements, provisioning
Kanban / projects
Workspace boards with stable IDs
Credentials
Password manager UX on vault backends
IaaS & domain wizards
Provider → VPS → DNS → harden
Integrated modules
Git forge + CI
Source control and delivery pipelines
Team chat
Matrix-based messaging
Organization and transactional mail
Object storage
S3 API for artifacts and backups
SIEM
Security telemetry and detections
Project delivery
Work tracking for delivery teams
Metrics & dashboards
SLO and operational visibility
Workflow automation
Entitlement-gated automation engines
Product extensions
Wallet / Ledger
Double-entry internal currency
CRM & forms
Lead capture and routing
Landing Engine
AI-assisted pages on the secure deploy path
White-label
Branded surfaces for partners