Universal Network Development LLC builds commercial and enterprise software following zero-trust principles: no component is trusted by default, and each part gets only the access it needs. This page describes our practices. It is not a certification or a guarantee that any system is free of vulnerabilities.
1. Separation of Internal and Customer Builds
Internal credentials and private signing keys are kept out of customer distributions. Customer builds are prepared without developer tools, debug output, or administrative backdoors.
2. Signed Licenses
Where a UND application uses a license, the license is digitally signed so the application can check it without contacting our servers. Device identifiers used for licensing are hashed rather than stored in readable form.
3. Software Bill of Materials (SBOM)
A machine-readable Software Bill of Materials (SBOM) for a specific released build is available to qualified counterparties on request. We review third-party dependencies for known vulnerabilities and fix or mitigate the ones that affect our software.
4. Coordinated Vulnerability Disclosure
Security researchers can report vulnerabilities to [email protected]. We aim to acknowledge reports within two business days. Our full disclosure policy is on the Security page.