Foritech Secure System is a cryptographic verification platform for industrial telemetry and machine data — a digital notary that proves where data came from and whether it was altered.
Watch the full pipeline: edge telemetry → ML-DSA-65 signing → server-side verification. Try injecting a tampered container.
Production-ready core, validated on real industrial hardware.
The verification intelligence lives server-side — this is the moat. The edge agent is open and lightweight; the verification engine is closed and paid.
Usage-based at scale. Device licensing for embedded. Enterprise contracts for critical infrastructure.
Honest assessment of open risks. All critical security issues are closed.
| Risk | Likelihood | Impact | Status | Mitigation |
|---|---|---|---|---|
| Trailing data / container injection | Low | P0 | CLOSED fd72c74 | Parser rejects all appended bytes after valid signature |
| Algorithm downgrade attack (ECDSA/Ed25519) | Low | Critical | CLOSED · enforced | ML-DSA-65 lock at wrap + verify layers — any other alg → immediate REJECT |
| Replay attack | Medium | Medium | CLOSED | InMemoryReplayGuard: future timestamp rejection + DoS guard |
| Plugin supply chain injection | Medium | Medium | CLOSED fd861e0 | PLUGIN_ALLOWLIST = frozenset({}) — empty allowlist by default |
| X.509 carries ECDSA P-256 (carrier only) | Low | Low | OPEN · TEMP COMPAT | Isolated in compat/ecdsa_carrier.py — NOT in trust path. Replacing with mldsa_carrier.py in v0.8.x |
| PQC standard changes (NIST) | Low | Medium | Mitigated | ML-DSA-65 is FIPS 204 finalized. Modular crypto interface — swappable. |