AVANOAvano
Trust

What we can show, and what we cannot yet.

A security company is trusted on evidence, not on its word. This page says what evidence exists today and which of the usual kinds does not exist yet.

01: Audits

Independent audits: none yet.

Third-party security audit

None has been done. Commissioning one is the founder's decision, planned for after launch. What exists instead is our own evidence: every security test shown to fail against a deliberate break, the breaks kept and planted again on our build server, and the attacks run against our own defences with their results, the failures included. That is not an audit, and is not called one.

None yet
02: Certifications

Certifications: none yet.

Product and process certifications

No product of ours holds a certification or an accreditation of any kind, and none has been applied for.

None yet
03: Release

Release integrity.

Every push to our source carries a signed record in a chain, so a rewritten history shows; a device checks firmware against the maker’s signed release; and the reproducible build is being measured. Verify and Proof.

04: Disclosure

Vulnerability disclosure.

Report a flaw to us, and see what we did with the ones already reported: Report a flaw.

05: Safety

Safety and compliance.

Effects against others

No design, instructions or code for jamming, and any effect with a physical consequence only under human authorisation and with an evidence record.

Refused
Export and sanctions

Which jurisdictions the company sells into is decided under EU export and sanctions law, by the company's founder.

Next
What we refuse to build

Refusals, each with its argument.

Built