Security at ARRTECH
Security practices for ARRTECH products.
How ARRTECH builds and ships software
Trust in a security supplier should rest on information the customer can examine. Software verification, operating records and a clear reporting process support that review.
Practices
Where we work.
ARRTECH Corporation is headquartered in Bellevue, Washington, with research and development in Europe.
Signed software.
Every agent is code-signed, with certificates managed in the console. Updates install on the administrator’s schedule.
Reported vulnerabilities.
Anyone can report a vulnerability to security@arrtech.ai or through the responsible disclosure page.
Parser support.
If ARRTECH does not read a log source yet, we add a parser at no charge during the contract.
Verify
Signed logs.
ARRTECH SIEM signs and chains every log. Any source exports with a standalone verifier, so an auditor can check it without ARRTECH.
Audit log.
The console records every login, search and configuration change, so administrators can check who did what.
Limits
Page scope.
These summaries explain the product’s role. The proposed deployment identifies the enabled functions, supported configuration and operating responsibilities.
