Ockam is a zero-trust data streaming platform that operates at the application layer to provide secure, end-to-end encrypted connections between systems. It decouples application security from the network, eliminating the need for implicit trust in the network infrastructure. Ockam enables secure point-to-point connections without requiring network configuration changes, allowing applications to connect to private systems across various environments including cloud, on-premises, and multi-cloud deployments. It is a suite of tools and libraries for building secure-by-design systems, providing end-to-end encryption, mutual authentication, and key management capabilities for distributed applications and IoT devices. Ockam simplifies the implementation of cryptographic protocols and secure communication channels between entities in a distributed system, particularly for applications communicating over Apache Kafka or other messaging systems.