The internet has never
needed this more.
Verified does not mean eligible. That gap sits under every interaction the internet runs. Opening an account. Signing a contract. Letting an agent move money or change your production platform.
The internet has never needed that gap closed more than today, and only now are the credentials in place to close it.
That is why KeyFlux exists, and why now.
What we build
The decision layer. Credentials are becoming infrastructure, issued by governments and standardised by bodies that move slowly and permanently. What sits above them, deciding what a verified party may actually do, is unclaimed.
We build it for both kinds of actor, in two product families. Verifiable Credential Core issues, holds and verifies the credentials people and organisations carry. REMIT governs what agents and workloads are allowed to do.
Two engines, on purpose. A credential check and a machine authorisation are different problems with different failure modes, so they are different code. What they share is a thesis, not a codebase: verified is not eligible. Prove it, decide it, record it.
People and organisations
Verifiable Credential Core. Credentials issued, held in a wallet the holder controls, and verified on presentation.
Agents and workloads
REMIT. Short-lived scoped authority, issued for one piece of work, pinned to someone who answers for it.
One thesis
Two engines, not one codebase. Verified is not eligible. Prove it, decide it, record it.
Leadership
Experienced leaders driving global trust infrastructure.
Rob Craig
Chief Executive Officer
Rob brings deep expertise in financial services, payments, and organisational transformation. As former Chair of AusPayNet, he helped deliver Australia's New Payments Platform, a global benchmark for real-time payments. He has tracked the evolution of digital identity frameworks across open banking ecosystems and chairs Squirrel Group, driving major revenue gains. Rob ensures KeyFlux scales with strategic discipline and credibility in regulated markets.
Josh Bahlman
Chief Product Officer and Chief Technology Officer
Josh is co-founder, CPO and CTO of KeyFlux. He has spent 20+ years securing national infrastructure and leading technology across global telcos, including building New Zealand's largest MSSP with Spark, delivering security services to government and large enterprise. Most recently he ran technology at a national telco, where a live quantum key distribution trial convinced him the scarce thing was never encryption. It was trust that outlives the algorithms underneath it. KeyFlux is named after the experiment that taught him that, and he sets its product and technical direction.
Robert Hayden
Chief Operating Officer
Robert is a proven sales leader and serial entrepreneur with 25 years of experience driving revenue growth and building winning strategies in B2B technology markets. He spearheaded the go-to-market strategy and partner program for Mattr, accelerating digital identity adoption across Australia and Asia Pacific. From network engineering leadership to founding businesses, Robert has a proven track record of turning vision into market traction. At KeyFlux, he drives execution with speed, commercial instinct, and the credibility to compete globally.
Ali Mosajjal
Chief Engineer
Ali is a security leader and offensive-defensive practitioner with deep experience building detection, response, and monitoring capabilities across telecommunications and critical national infrastructure. He has led national-scale incident response, executed red team campaigns simulating advanced adversaries, and created globally adopted open-source security tools including DNSMonster and TCPShark. Ali's career blending attacker mindset, defensive discipline, and open-source innovation makes him a natural fit for KeyFlux's mission.
Behind the leadership team sits a group of security engineers, cryptographers and developers who have delivered mission-critical systems for governments, telcos and enterprises.
How we work
Open standards
We build on ISO, W3C and OpenID specifications. Interoperability is the product, not a feature of it.
Privacy by design
Selective disclosure by default. Learn the fact you need, not the person.
Claims we can defend
We would rather tell a customer what ships than what demos.
Where we are
Incorporated in Australia, with the team distributed across Europe and Asia Pacific.
Request a Demo
If the gap between verified and eligible is a problem you recognise, we should talk.
Request a Demo