DISPATCH NETWORK: OPERATIONAL
INSPECT 4KB CONNECTOR
[01 // CORE MECHANISM]ZERO-SOURCE-FILE LMS DISTRIBUTION FOR B2B TRAINING PROVIDERS
WRAPPER FOOTPRINT: 4,096 BYTES//SOC2 TYPE II READY ARCHITECTURE
INTELLECTUAL PROPERTY PROTECTION & LICENSE ENFORCEMENT

Deliver SCORM courses into client LMSs. Without handing over raw files.

Generate 4 KB dispatch connectors for Workday, Cornerstone, and SAP. Your source code, video streams, and quiz logic stay encrypted on your cloud. If an enterprise client cancels their renewal, revoke their access with one click.

CLIENT LMS ARTIFACT SIZE-99.998% PAYLOAD
4.1 KB250.0 MB RAW .ZIP

Contains only an encrypted imsmanifest.xml and zero-logic CMI bridge stub. Zero raw MP4, HTML, or JS assets ever touch the client LMS disk.

ACCESS REVOCATION SLAINSTANT EDGE KILL
< 50msGLOBAL TOKEN INVALIDATION

Revoke non-renewing client licenses, enforce hard seat caps, and block unauthorized LMS domain clones in real time.

OTA CONTENT HOT-PATCHINGZERO LMS RE-UPLOADS
1 PushUPDATES ALL CLIENT PORTALS

Fix compliance text or replace video modules once on your cloud—every client LMS streams the new version immediately.

RUNTIME PROTOCOL:
TEST RENEWAL KILL-SWITCH:
NODE 01 // PUBLISHER CLOUD VAULT
YOUR IP STAYS HERE
Master_Compliance_2026.scorm250.4 MB
SHA-256: 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b
PROTECTED SOURCE ASSETS (NEVER EXPORTED):
/video/hls_4k_segments_*.tsAES-256-GCM
/engine/quiz_scoring_logic.wasmSERVER-SIDE
/branching/storyline_state.binOBFUSCATED
ORIGIN STORAGE: AWS S3 / R2RAW ZIP EXPORT: BLOCKED
NODE 02 // SCORMSHIELD PROXY
4.1 KB
DISPATCH PACKAGE:connector_wd5.zip (4 KB)
TOKEN TTL:300s (Auto-Rotating)
ORIGIN LOCK:*.myworkday.com
PII SCRUBBER:HMAC-SHA256 Edge Hash
DRM STREAM: AUTHORIZEDHTTP 200

Streaming Ephemeral HLS + proxying CMI calls back to client LMS.

MEDIA STREAM═══ Encrypted HLS ══►
CMI TELEMETRY◄══ postMessage RPC ═══
NAMESPACE:window.API_1484_11
NODE 03 // CLIENT LMS (WORKDAY)
PLAYING 60FPS
MODULE 03: GLOBAL SANCTIONS AUDITSEAT 342 / 500
Interactive Case Study Stream
Decrypted in memory // Zero local cache
SCORE: 94%
LIVE SCORM 2004 4th Ed CMI COMMIT LOGNATIVE GRADEBOOK
> API_1484_11.Initialize("")
> API_1484_11.SetValue("cmi.completion_status", "completed")
> API_1484_11.SetValue("cmi.score.scaled", "0.94")
> API_1484_11.Commit("")
LMS HOST: WORKDAY / CSOD / SAPCMI SYNC: VERIFIED
02//REVENUE LEAK AUDIT
AUDITED ACROSS 1,400+ ENTERPRISE L&D CONTRACTS

The "Enterprise Blindspot": Why raw SCORM files silently destroy B2B renewal rates.

Once you email a 250 MB .zip archive to an enterprise client's LMS administrator, you permanently forfeit technical control over your intellectual property, seat limits, and multi-year renewal leverage.

TRADITIONAL WAY // RAW .ZIP HANDOFFZERO POST-DELIVERY TELEMETRY OR ENFORCEMENT
NET 5-YEAR OUTCOME: -$45,000 UNPAID USAGE PER CHURNED CLIENT
STAGE 01 // DAY 1$15,000 / YR
Send raw 250 MB .zip

You export your unencrypted Storyline, Rise, or Captivate archive containing raw MP4 videos and HTML/JS source code and send it to the client's LMS admin.

STAGE 02 // MONTH 12CHURN EVENT
Client stops paying after Year 1

Procurement freezes budget or a new L&D director cancels the renewal. Your contract states they must delete the SCORM package from Workday.

STAGE 03 // YEARS 2–5UNLICENSED LAUNCHES
Client keeps playing course for 5 years for free

The LMS admin never removes the SCORM file from automated onboarding tracks. Worse, they copy the .zip to 3 sister business units with zero visibility.

STAGE 04 // CUMULATIVE LOSSUNRECOVERABLE
You lose $45,000

3+ years of uncollected annual license fees per churned enterprise logo, plus permanent loss of proprietary course IP.

SCORMSHIELD WAY // 4 KB THIN-WRAPPER DISPATCHCRYPTOGRAPHICALLY PINNED TO CONTRACT & SEAT TERMS
NET 5-YEAR OUTCOME: 100% LICENSE COMPLIANCE + AUTOMATED RENEWAL LEVERAGE
STAGE 01 // DAY 14.1 KB CONNECTOR
Send 4 KB thin-wrapper

Client uploads a 4 KB SCORM connector into Workday or Cornerstone. Course assets stream from your encrypted edge vault with domain & seat-cap pinning.

STAGE 02 // MONTH 12CONTRACT LAPSE
Client stops paying

Renewal invoice passes net-30 grace window, or client attempts to launch seat #501 on a 500-seat enterprise agreement.

STAGE 03 // DAY 3661-CLICK REVOCATION
Flip kill switch ➔ LMS displays “Access Expired”

SCORMShield halts token issuance. Learners launching the course inside the client's LMS see a branded license expiration screen with your renewal link.

STAGE 04 // REVENUE RECOVEREDENFORCED
Client is forced to renew

Because mandatory compliance training cannot run without an active token, renewal POs clear procurement in days—not quarters.

INTERACTIVE EXPOSURE CALCULATOR // ESTIMATE YOUR SILENT LEAK
How much post-churn usage is happening inside your clients' LMSs right now?

Adjust your active enterprise client count and average annual license price to model conservative 20% post-Year-1 unlicensed retention over 3 years.

ENTERPRISE CLIENTS:20 LOGOS
AVG ANNUAL LICENSE:$15,000/yr
3-YR UNLICENSED REVENUE LEAK (4 LAPSED LOGOS)
$180,000
03//INTERACTIVE ARCHITECTURAL SANDBOX
INTERACTIVE SIMULATOR // ZERO LATENCY

Test the live dispatcher: Seat caps, kill-switch revocation, and OTA hot-patching.

Operate the SCORMShield dispatch control plane below. Adjust the active learner seat allocation, toggle the license state between Active and Suspended, or simulate an unauthorized domain clone to see how the embedded client LMS player responds in real time.

DISPATCH POLICY CONTROLLER
ID: DSP-99481-WD
STATE: ACTIVE
342 / 500 SEATS (68%)
Drag to 500 to trigger seat-cap lock
ORIGIN PINNING
LIVE HOT-SWAP
WEBHOOK SYNC: ENABLEDHMAC-SHA256 SIGNED
https://wd5.myworkday.com/learning/scorm_player.htm?dispatch=crs_aml_2026
HOST:Workday Learning
COURSE:Global Anti-Money Laundering & Sanctions (v2.4.1)
ENROLLED SEATS: 342 / 500|● STREAM ENCRYPTED
LIVE STREAMING FROM PUBLISHER CLOUD // v2.4.1

Module 3: 2026 OFAC & Cross-Border Wire Screening

CMI SCORE: 94%
HLS Segment #042 (AES-256-GCM Decrypted in RAM)
08:14 / 11:001080p60 // ZERO LOCAL FILE CACHE
Fires live SetValue() + Commit() to Workday Learning
LIVE PROXY <-> LMS CMI TELEMETRY BUS
BUFFER: STREAMING
[14:22:01.04]OUTPOST /v2/handshake { tenant: "wd5.myworkday.com", pkg: "crs_aml_2026" }
[14:22:01.16]IN200 OK -> Ephemeral DRM Token issued (TTL: 300s, Seat 342/500)
[14:22:01.42]OUTAPI_1484_11.Initialize("") -> "true" [11ms]
[14:22:02.08]INHLS Stream: Decrypted segment_001.ts (AES-256-GCM verified)
[14:22:04.19]OUTAPI_1484_11.SetValue("cmi.location", "mod_03_sanctions") -> "true"
04//THE SCORM CLOUD KILLER
ZERO PER-REGISTRATION OVERAGE FEES

Stop paying Rustici SCORM Cloud's punitive per-registration tax.

Legacy dispatch engines charge you every single time a learner launches a registration—turning a successful enterprise rollout into an unpredictable $1,500 to $4,000/month overage bill. SCORMShield charges flat, predictable infrastructure pricing.

MONTHLY ACTIVE LEARNER REGISTRATIONS18,500 / MO
2,000 REGS/MO25,000 REGS/MO50,000 REGS/MO75,000 REGS/MO
ACTIVE CLIENT LMS DISPATCHES45 DISPATCHES
5 CLIENT PORTALS50 CLIENT PORTALS100 CLIENT PORTALS150+ PORTALS
ARCHITECTURAL WHY // WHY LEGACY DISPATCH OVERCHARGES
Rustici SCORM Cloud

Meters every newly enrolled employee inside your client's Workday instance at ~$0.08–$0.10/reg. When a client onboards 15,000 seasonal workers, your margin evaporates.

SCORMShield Edge Proxy

Stateless Cloudflare/AWS edge workers + 4 KB client-side CMI RPC bridge. Costs us fractions of a cent per 10,000 launches—so we charge flat monthly tiers.

MATCHED SCORMSHIELD TIER:Growth PLAN ($583/MO)
LIVE INFRASTRUCTURE COST BENCHMARKSAVE 69% ANNUALLY
LEGACY MONOPOLY (SCORM CLOUD)
Base fee + punitive per-registration overages
$1,855/mo
$22,260 / yr
SCORMSHIELD (GROWTH TIER)
Flat predictable pricing + Domain Lock + OTA Version Push
$583/mo
$6,996 / yr
NET ANNUAL INFRASTRUCTURE SAVINGS
$15,264 saved / year
Lock In Flat Pricing
05//VALUE-ANCHORED PRICING MATRIX
ANNUAL BILLING INCLUDES 2 MONTHS FREE

Predictable infrastructure tiers built for high-margin training providers.

Recovering a single lapsed enterprise contract pays for SCORMShield for 5+ years. Every plan includes unlimited course bandwidth, 1-click renewal revocation, and zero per-registration overage penalties.

SELECT BILLING COMMITMENT:[ANNUAL SAVES 2 MONTHS // ~17% OFF]
TIER 01 // STARTERBOUTIQUE CATALOGS

Starter

For specialized B2B training firms protecting core flagship programs across initial enterprise accounts.

$2,990/ year ($249/mo eq.)
Billed annually (2 months free vs. $3,588/yr)
DISPATCHES
15 Active
LEARNER CAP
5,000 / yr
  • 15 Active Client LMS Dispatches (SCORM 1.2 & SCORM 2004 3rd/4th Ed)
  • Up to 5,000 Active Learners with zero per-registration overage traps
  • 1-Click Instant Renewal Kill-Switch & Contract Expiration Date Timers
  • AES-256-GCM Encrypted HLS Video & Assessment Asset Streaming
  • Real-Time CMI Completion & Score Telemetry Dashboard
TIER 02 // GROWTHMOST POPULAR

Growth

Full cryptographic domain locking and global zero-touch version updates for scaling B2B course libraries.

$6,990/ year ($582/mo eq.)
Billed annually (Save $1,398/yr — 2 months free)
DISPATCHES
75 Active
LEARNER CAP
35,000 / yr
  • 75 Active Dispatches & 35,000 Learners across SCORM 1.2, 2004, xAPI & cmi5
  • Cryptographic Domain Referrer Lock (pins each 4 KB zip to approved client LMS hostnames)
  • Global OTA Version Pushes (hot-patch all client LMS portals simultaneously without re-uploading)
  • In-LMS Seat Cap Enforcement + Automated Seat Expansion Upsell Webhooks
  • Zero-PII Edge Anonymizer (HMAC-SHA256 Learner ID Hashing)
TIER 03 // ENTERPRISEGLOBAL PUBLISHERS

Enterprise

Dedicated white-label dispatch infrastructure, custom CNAME streaming, and contractual 4-hour SLA.

$14,990/ year ($1,249/mo eq.)
Billed annually (Save $2,998/yr — 2 months free)
DISPATCHES
Unlimited
LEARNER CAP
150,000+
  • Unlimited Active Dispatches & 150,000+ Learners (custom volume scaling included)
  • Custom White-Label CNAME (e.g., lms-edge.yourcompany.com in client network logs)
  • Guaranteed 4-Hour Engineering SLA + Dedicated Slack/Teams Architecture Channel
  • REST Provisioning API + Automated Salesforce / HubSpot Contract Renewal Sync
  • SAML 2.0 / Okta SSO, Custom Data Processing Agreement (DPA) & InfoSec Questionnaire Support
ARCHITECTURAL SPECIFICATION MATRIX // PROCUREMENT REFERENCE
Capability / SpecStarter ($299/mo)Growth ($699/mo)Enterprise ($1,499/mo)
Active Dispatches15 Dispatches75 DispatchesUnlimited
Annual Active Learners5,000 Learners35,000 Learners150,000+
Domain Referrer Origin Lock—✓ Wildcard & Exact Host Pinning✓ + mTLS & Custom CSP Headers
Global OTA Course Hot-PatchingManual✓ Instant Multi-Tenant Push✓ Staged Canary + Rollback
Custom White-Label Streaming CNAME——✓ Custom TLS Cert & Domain
Contractual Response SLA24-Hr Business12-Hr Priority4-Hr Guaranteed SLA
06//LMS COMPATIBILITY & ZERO-PII SECURITY
100% PASS RATE ON CLIENT CISO AUDITS

Engineered to pass Fortune 500 LMS & InfoSec reviews on the first submission.

Every 4 KB connector is battle-tested against strict cross-domain iframe policies in Workday, Cornerstone, and SAP—while hashing learner identifiers at the edge so zero employee PII ever touches our database.

VERIFIED CLIENT LMS RUNTIME ENVIRONMENTSCROSS-ORIGIN CMI BRIDGE // ZERO PLUGINS REQUIRED
WD-LRNVERIFIED (11ms)
Workday Learning

SCORM 1.2 & 2004 4th Ed // Workday Media Cloud & Iframe Bridge

CSOD-ENTVERIFIED (14ms)
Cornerstone OnDemand

Full 64KB cmi.suspend_data Bookmarking & Multi-SCO Support

SAP-SFVERIFIED (13ms)
SAP SuccessFactors

iContent & OCN Connector // Strict X-Frame-Options Bypass

DCB-LRNVERIFIED (12ms)
Docebo Learn

Central Repository Sync & Automated Webhook Seat Provisioning

MDL-TOTVERIFIED (15ms)
Moodle / Totara

v3.9 – v4.5+ Native SCO Wrapper // Drop-In SCORM Cloud Replacement

CNV-EDUVERIFIED (12ms)
Canvas LMS

Instructure SCORM Engine & Gradebook Passback Bridge

COMPLIANCE POSTUREAUDIT READY

SOC2 Type II Ready Architecture

Isolated single-tenant KMS encryption keys, immutable CloudTrail access logs, automated vulnerability scanning, and strict role separation designed for enterprise vendor risk assessments.

PRIVACY BY DESIGNGDPR / HIPAA BYPASS

Zero Learner PII Storage

Our 4 KB bridge hashes cmi.core.student_id with a tenant-specific HMAC-SHA256 salt inside the browser before seat counting. Raw employee names and emails never leave the client's LMS.

TRANSPORT & MEDIA DRMFIPS 140-3 CIPHERS

TLS 1.3 End-to-End Encryption

Course video streams are sliced into 4-second AES-256-GCM encrypted HLS segments authorized via short-lived 300-second JWTs—blocking browser extensions and network tab scrapers.

HEADLESS PROVISIONING // CLI & REST API

Automate 4 KB connector generation straight from Salesforce or your CI/CD pipeline.

Provision domain-locked connectors automatically when a deal closes in Salesforce, or revoke access automatically when a subscription lapses in Stripe or NetSuite.

Deploy First Connector
TERMINAL // PROVISION ENTERPRISE CONNECTORREST / CLI v2.8
$ scormshield dispatch create \
    --course "crs_aml_global_2026" \
    --tenant "walmart-workday-prod" \
    --allow-origin "*.myworkday.com" \
    --seats 2500 \
    --expires "2027-10-14T00:00:00Z" \
    --protocol scorm2004-4th

✓ Verified master package (250.4 MB encrypted on edge)
✓ Signed X.509 origin policy for *.myworkday.com (Max Seats: 2,500)
✓ Generated 4.1 KB connector: ./walmart_aml_2026_connector.zip