We sell where we're a fit — and nowhere else.
One safe language. One image. Embedded rigor, verified security, and a real desktop — at once.
Sigil and sigilOS aren't for everyone, and that's the point. Below are the verticals where our architecture is a genuine fit — and each packet is honest about where we lead on real hardware today versus where certification and coverage are still ahead of us. If we're not right for your problem yet, we'll say so. The difference model explains why the combination we offer is one no incumbent fills. Investing? Start with the category thesis.
Safety-Critical & High-Assurance
Medical, avionics, defense, industrial, automotive. Memory-safe by construction, capability- isolated, and provable before it runs — the properties certification exists to establish, built into the substrate.
ON METAL · PRE-CERT Read the packet →Defense & Sovereign Systems
Tactical edge, cross-domain separation, sovereign infrastructure. One auditable safe language, a reproducible verified TCB, and capability separation — a trust chain you can verify, not take on faith.
ON METAL · UNACCREDITED Read the packet →Embedded & Edge / IoT
Appliances, gateways, sensor nodes, kiosks. A 1 GB Pi-3 floor, one image that scales, capability-isolated peripherals, and a self-healing bootloader that fetches the driver it needs. No fat runtime, no ambient trust.
ON METAL · BUILDING Read the packet →Gaming & Enthusiast Computing
Forge packs, verifies, and runs retro systems with capability-sandboxed cores and a signed Relic game format — on your desktop and on a Pi. This one you can download and run today.
SHIPPING NOW Read the packet →Security Research & Tooling
Red teams, malware analysis, reverse engineering. A research platform where every tool runs capability-jailed by default and untrusted samples land in a hardware-isolated sandbox — isolation by construction, not by discipline.
MODEL REAL · CATALOG YOUNG Read the packet →The Sigil Language
AI-native, effect-typed, contract-carrying, self-hosting. For programmers who want memory safety, provable contracts, and no ambient authority — in one language, with the metal underneath.
LANGUAGE REAL · ECOSYSTEM YOUNG Read the packet →