Solutions · Defence

Send the vendor its bundle. Keep the topology inside.

A diagnostic bundle from a defence network is the network in a box — sites, links, addressing, the management plane, serials, certificates, engineers' names. It cannot leave, so vendor cases stall or someone scrubs it by hand. LogVeil is being built so that the bundle can go: every sensitive value rewritten under a policy you write and a key you hold, inside your own virtual machines, with a signed record for your security cell of what was done and what is not asserted.

Inside your perimeter, the estate — sites, links, the management plane — produces a diagnostic bundle that carries the site topology and addressing, hostnames that encode places, serials and certificates and engineers’ names; LogVeil, in your own virtual machines under your policy and your key, rewrites every sensitive value and signs the attestation for the security cell; only the sanitised bundle and the attestation cross the perimeter to the vendor’s technical assistance centre. The release decision stays with you. INSIDE YOUR PERIMETER OUTSIDE Your estate sites and linksthe management plane The diagnostic bundle site topology and addressinghostnames that encode placesserials and certificatesengineers' names LogVeil, in your own VMs your policy, your keyevery sensitive valuerewritten; the attestationsigned for the security cell The vendor's TAC the sanitised bundle andthe attestation arrive;the originals never do THE RELEASE DECISION STAYS WITH YOU · NOTHING LEAVES WITHOUT A RECORD Inside your perimeter, the estate — sites, links, the management plane — produces a diagnostic bundle that carries the site topology and addressing, hostnames that encode places, serials and certificates and engineers’ names; LogVeil, in your own virtual machines under your policy and your key, rewrites every sensitive value and signs the attestation for the security cell; only the sanitised bundle and the attestation cross the perimeter to the vendor’s technical assistance centre. The release decision stays with you. INSIDE YOUR PERIMETER Your estate sites and linksthe management plane The diagnostic bundle site topology and addressinghostnames that encode placesserials and certificatesengineers' names LogVeil, in your own VMs your policy, your keyevery sensitive valuerewritten; the attestationsigned for the security cell OUTSIDE The vendor's TAC the sanitised bundle andthe attestation arrive;the originals never do THE RELEASE DECISION STAYS WITH YOU

Drawn by code from the description of the estate; not a screen.

The bundle

What a bundle from this estate carries

  • the site topology — which sites exist and how they are linked
  • addressing that maps the network to places
  • hostnames that encode where things are
  • the management plane — how the network is run
  • serial numbers and certificates
  • engineers' names, in usernames and in filenames

Before it leaves

The release decision is yours

a vendor's word instead of a record

output the vendor's engineer cannot use

anything leaving without a record

What has to be true before anything leaves — in the words of the people who decide.

LogVeil is designed to satisfy your own release policy before anything leaves your network: what may go out, under whose rules, with what record. The attestation is the signed record for the security cell — what was rewritten, what was dropped, what was passed through, which scanners checked the output, and what is explicitly not asserted. Reversal is per token, under a two-person rule that mirrors the two-person controls you already run, in an append-only audit log. You are asked to read the record, not to take a promise.

The fit

How LogVeil is designed to fit

Your policy, your dictionary, your key

in development

The customer writes the rules and holds the key; Zindagi never sees either.

The policy and the key →

Verified — and honest about what isn’t

in development

A separate verification stage re-scans the output with independent scanners, fails closed, and signs an attestation that also says what is not claimed.

The attestation, field by field →

Reversible under control

in development

When the TAC replies about a masked address, your engineer can translate it back — and nobody else can.

How it works, in depth →

Built for the air gap

in development

An offline kit for your own VMs; nothing phones home; AI is optional, off by default, and never touches the result.

The offline kit →

The path

From a proof-of-concept on your own bundles to your own operation

  1. First

    Early access

    Early access is a free, guided proof-of-concept on your own bundles inside your own network: you choose the bundles, you write the policy with our help, and you keep the key; we hand over the offline kit, run the first jobs with your engineers, and leave you with the attestations.

  2. Then

    The offline kit, for your own operation

    in development

    An offline kit for your own VMs; nothing phones home; AI is optional, off by default, and never touches the result.

  3. On the roadmap

    An appliance

    planned

    A server with a local GPU for local AI and TPM-sealed keys. No bill of quantities, no price — it is a roadmap item.

Procurement: direct, through a defence public-sector undertaking, or by tender. Help with a detailed project report and a vendor-neutral specification is available.

Status, and the next step

LogVeil is in development. An early-access programme opens after our first field trial.

Request early access