Corsec’s Sandbox is an ecosystem used to protect your Intellectual Property (IP), including: a secured facility accompanied by a custom engineered laboratory that meets industry security requirements for connectivity and physical access, screened and trained personnel to manage and test your solution, and validated systems and proven processes to protect against unlawful access to data and products.

Physical Security & Controls:

• Electronically-controlled and logged two-factor access portal that exceeds Common Criteria requirements
• Independent environmental controls with backup for safe and continued operations
• Security monitoring system with video recording 24/7/365
• Limited physical access control policy
• Personnel and logical material controls
• SFTP, PGP, safe storage of digital storage media, & material destruction

Secured Connectivity:

• Redundant fiber optic connectivity
• FIPS 140-2 Level 2 validated Unified Threat Management system including VPN, and Intrusion Prevention
• Stateful Traffic Filter Firewall Extended Package & High Availability firewall configuration
• Switched gigabit LAN (with 10GB capability)
• VLAN architecture & Isolated lab VLAN

Staffing & Support:

• Corsec’s security experts are all extensively trained and cleared to work with highly sensitive information, ensuring that every product is monitored and safeguarded to guarantee each and every client investment.
• Dedicated laboratory staff to setup up, configure, and manage customer equipment and supporting infrastructure.
• Dedicated software engineering group for Algorithm testing and execution, & Entropy Analysis
• Corsec visitors are escorted through our facility to protect customer IP
• Document review process ensures that public-facing documentation contains no customer IP
• All work machines are password-protected, using best-practice password policies
• Up to 40U rack space per customer and Per-rack UPS protection
• Additional requirements can be accommodated

Operating Systems:

• Apple
  • OSX through v10.13
  • iOS through v12
•  Google
  • Android through v8.1.0
  • Chromium
• Microsoft
  • Clients: Windows v3.1 – Windows v10
  • Servers: Windows NT – Windows Server 2016
• Oracle Solaris through v11.4
• Red Hat developers license
• RHEL through v7.5
• *BSD
• DragonflyBSD through v5.2.2
• FreeBSD through v11.2
• NetBSD through v8.0
• OpenBSD through v6.3
• Linux

Core Platforms:

• VMware vSphere 5.5 with multiple ESXi hypervisors
  • 680GB physical RAM, with empty slots available
  • 48 virtual processor cores
  • ESXi 6.0 hypervisors
• Microsoft Hyper-V 2016
• Primary SAN
  • Redundant: controllers, NICs, and switches
  • 13.2TB raw storage, 8.4TB in RAID
• Backup SAN
  • 17TB raw storage, 11.3 in RAID
• Individual Windows workstations, up to 3 per customer. Additional requirements can be accommodated through explicit agreement
• Supporting infrastructure, including:
  • Active Directory
  • DNS
  • NTP
  • syslog