SELinux & System Hardening
SELinux policy engineering and Linux hardening, with least-privilege access and clear boundaries between services.
High
Assurance
Computing
with SELinux
High Assurance Security Engineering
We design and build secure Linux systems for organisations with demanding security requirements. Our expertise combines SELinux policy engineering, system hardening and secure network architecture to protect sensitive information and limit the consequences of compromised applications.
Sovereign Fortress brings this expertise together in an architectural foundation for our security products and services. Its first application is our High Assurance Web Application and API Protection (WAAP) project, combining web application firewall (WAF) functionality, API protection and bot controls with strict confinement of the security platform itself.
Services
Our engineering work spans SELinux policy, secure Linux infrastructure and application security. We start with the resources and communication paths a system needs, then define the controls and checks that support its intended behaviour.
Secure Network Architecture
Linux hardening, network separation and explicit communication paths between services and security domains.
Web & API Protection
High Assurance WAAP engineering, combining application traffic controls with service isolation and controlled configuration.
Sovereign Fortress
High Assurance by Architectural Constraint: a security architecture built around explicit trust boundaries, controlled enforcement and reviewable evidence.
SELinux - MAC
SELinux implements Mandatory Access Control for Linux. Its policy can restrict which resources a confined service may access, complementing ordinary user and group permissions. This supports least privilege and helps limit the consequences of a compromised application. These principles inform Sovereign Fortress and our High Assurance WAAP engineering.