What is qURL™?
qURL is an access layer that separates access from visibility — your infrastructure stays invisible until identity is proven, then the link is gone.
Invisible-By-Default
You can't attack what you can't see.
Can't find itIdentity-Bound
Accessible only with cryptographic proof.
Can't share itSelf-Destructing
Time-Limited, Single-Use
Can't reuse itURL vs. qURL
Same applications. Different access model.
Everyone reaches the door. Security begins after contact.
Nothing exists until identity is proven. Then it’s gone.
| Feature | URL Internet | qURL Internet |
|---|---|---|
| Default State | Always visible | Invisible until verified |
| Access Flow | Connect → authenticate | Verify → connect |
| Address | Public URL | Cryptographic token |
| Audience | Browser-driven, human-only | Agent-native and human |
| Access Control | Firewall/VPN/Login Portal | Cryptographic key |
| Security Model | Bolted on after exposure | Native, by design |
| Sharing | Copy the URL | Delegate access |
Verify first. Reveal later.
URLs expose first and protect later. qURLs verify first and reveal later.
Drop in a file or a web app and watch qURL make it invisible by default — reachable only through a single-use, identity-bound link.
Supports all file types — PDF, images, documents, and more. Up to 4 MB.
Built on open standards.
Every layer can be inspected, verified, tested, and independently validated by developers, standards bodies, and researchers worldwide.
Cloud Security Alliance
CSA NHP Specification
The NHP specification is published through the Cloud Security Alliance, one of the world's leading cloud security standards organizations with members including AWS, Microsoft, Google, and Alibaba.
cloudsecurityalliance.org →IETF
IETF NHP Internet-Draft
NHP is being standardized through the Internet Engineering Task Force, the organization responsible for foundational Internet standards including TCP/IP, HTTP, TLS, and DNS.
ietf.org →Open Source
OpenNHP on GitHub
The complete OpenNHP reference implementation is open source and publicly available for inspection, review, testing, and contribution by developers worldwide.
Common questions.
How qURLs compare to what you already know.
What is a qURL?
A qURL is a cryptographic, identity-bound, single-use link that opens a portal to a protected resource. It encapsulates a complete Network Hiding Protocol exchange, so the resource stays invisible on the network until the qURL is presented and the holder's identity is proven — then the portal closes and the link is gone.
How does a qURL relate to NHP?
NHP is the Cloud Security Alliance's Network Hiding Protocol — the cryptographic standard for "authenticate before connect" networking. A qURL is that protocol packaged as a link: every qURL carries a full NHP exchange so your team can adopt network hiding without writing protocol code.
How is a qURL different from a signed URL?
Signed URLs (like AWS pre-signed URLs) are replayable within their TTL — anyone with the link can use it multiple times. qURLs are single-use: the first access consumes the link permanently. They also require identity verification before generation, so there's no anonymous sharing.
How is this different from an OAuth token?
OAuth tokens grant ongoing access until they expire or are revoked. qURLs grant access to a single resource for a single action. There's no token to steal, rotate, or revoke — once used, it's gone.