Newsroom
Great Wing Introduces Wormhole™: The Communication Architecture AI Can’t Break Into
NEW YORK, September 27, 2026 — Great Wing today announced Wormhole™, a communication protocol built on a fundamental departure from how networked devices operate: a device does not need general internet access to communicate with authorized devices, people, applications, or networks anywhere in the world.
The Problem: Reachability Creates Exposure
The internet was designed to make devices reachable. That reachability also creates an attack surface: internet-connected systems can generally be scanned, probed, fingerprinted, and targeted.
Organizations use firewalls, segmentation, VPNs, endpoint protection, and other controls to manage that exposure. These measures are important, but they largely address the consequences of internet reachability rather than eliminating threats at the source.
This challenge is particularly significant for remote workforces, sensitive government systems, and industrial and operational technology, where connecting legacy or sensitive equipment can introduce risks that the systems were never designed to withstand.
Wormhole: A Different Architecture
Wormhole is designed so authorized endpoints can communicate over the public internet without exposing the endpoint itself as a general-purpose internet host or conventional TCP/IP service. Wormhole-connected devices therefore do not present the fixed, addressable footprint that conventional internet scanning and reconnaissance tools rely on.
Wormhole operates above standard TCP/IP, UDP, and ICMP, and adds encryption designed to withstand future quantum attacks, along with packet-level integrity and origin verification.
No Response to Conventional TCP/IP Probing
Wormhole-connected devices do not respond to conventional internet-based TCP connection attempts, including unsolicited SYN, FIN, RST, and ACK packets. Conventional scanners therefore cannot establish a standard TCP/IP connection to a Wormhole endpoint or use such responses to identify an exposed service.
Wormhole uses dynamic, non-persistent IP addresses and port numbers rather than fixed, stable endpoints, further limiting the ability to locate or track an endpoint through conventional reconnaissance.
This extends to AI-driven scanning and intrusion tools: because systems guarded solely by Wormhole present no conventional, addressable TCP/IP footprint to probe, AI cannot break into systems that are guarded solely by Wormhole.
Encryption Designed for the Post-Quantum Era
Wormhole incorporates symmetric-key encryption designed to resist known quantum attack methods. Each device is provisioned with a unique, device-bound credential required to unlock its working encryption key, with a portion of that credential never transmitted over a network.
Working keys can also rotate frequently, limiting the exposure associated with any individual key. Discoverability and cryptographic strength provide separate defenses: one helps prevent an endpoint from being located and targeted; the other protects traffic if an adversary intercepts it and attempts to obtain or break a working key.
Packet-Level Integrity and Origin Verification
Wormhole verifies individual packets for signs of alteration or unauthorized origin, helping detect tampering, injection, and other attempts to manipulate traffic in transit. Device-level pairing further binds working keys to their authorized devices, preventing one device’s credential from being used to unlock another device’s key.
Designed to Work With Existing Infrastructure
Wormhole is designed to layer onto existing infrastructure without requiring organizations to replace hardware, rewrite software, or change established operational workflows.
Dramatically Reduces the Attack Surface
By reducing device exposure and discoverability, Wormhole is designed to reduce certain categories of cybersecurity risk and the infrastructure and operational effort required to manage them. Potential benefits include reducing reliance on some exposure-management infrastructure and decreasing the monitoring and response burden associated with reconnaissance-driven threats.
Availability
Wormhole is ready to deploy. It has been tested with 99.99% uptime.
Next Up
Great Wing will soon launch an app that enables quantum-resistant, secure corporate video calls, voice calls, and text messaging worldwide, designed to operate without interference.
Great Wing Makes the Internet Safer with Revolutionary New Cybersecurity Product
Installs first “invisible VPN” that cannot be disturbed or hacked
NEW YORK, November 30, 2023 — Great Wing, a cybersecurity company that developed patented quantum-resistant encryption that establishes zero-trust environments, announces the first deployment of its patented DefenceDome Distributed™ network protection solution.
DefenceDome Distributed runs a Ghost™ process at each node, rendering communications invisible to and inaccessible from the LAN or internet—preventing eavesdropping, hacking, spoofing and denial of service (DoS) attacks.
Ghost™ initializes the Wormhole™, a hardened TCP/UDP/ICMP-encrypted protocol that anonymizes and obfuscates network packets. With DefenceDome Distributed, the Wormhole becomes the only way to communicate throughout the network.
“Most cybersecurity solutions communicate using TCP/IP, which is buggy. Great Wing’s DefenceDome technology is markedly different—and safer—because it uses a unique protocol called the Wormhole that solves many of TCP/IP’s inherent problems. At the same time, it gives the appearance of TCP/IP so it can pass through the internet, yet remains undetected,” explained Great Wing CEO Moshe Ben-Benjamin. “Any communication that travels through the Wormhole will be quantum-resistant because of the chaotic nature of the Wormhole.”
The first deployment of DefenceDome protects multiple servers at the corporate location of Pro Locksmith & Security, a company that installs smart homes and provides access control to multi-tenant buildings. It connects multiple servers running different operating systems (Microsoft Windows and Linux) to multiple remote sites through different internet service providers (ISPs). “I have worked with many cybersecurity products over the years and I have never before experienced such a straightforward and easy configuration and installation,” said Yoni Hakim, CEO of Pro Locksmith & Security.
“All communications have been running seamlessly with no breaches, and the Wormhole has even increased the throughput of the network,” said Ben-Benjamin.
A penetration tester who was given the IP address of the customer’s network was not able to detect the existence of the network. “Normally when conducting reconnaissance, we can see some of the network devices, such as routers and servers, and the services they are providing. That’s a prerequisite for launching an attack. But with the Great Wing network I was not able to see anything,” said Alex Comerford, a cyber expert who conducted the pentest.
DefenceDome technology seamlessly integrates into existing networks without the need for configuration adjustments or infrastructure modifications. “We’ve designed DefenceDome from the ground up to be compatible with any network, even in the cloud. You don’t need to adapt to DefenceDome; rather, DefenceDome adapts to you,” explained Ben-Benjamin.
DefenceDome software can be used on its own or with any existing cybersecurity software that uses a TCP/UDP/ICMP networking stack to increase the security. Products like VPNs, encrypted protocols (TLS/SSL, IPsec, etc.), or even SASE architectures based on these networking stacks can be made more secure (or hardened) at zero performance cost. Businesses now have the ability to effortlessly de-risk their most complicated tools and networks.
About Great Wing
Great Wing develops next-generation cybersecurity technology designed to address the limitations of current security solutions, including the looming threat quantum computing poses to encrypted data. Learn more at greatwing.com.
Media Contact
Moshe Ben-Benjamin
917-225-7684