Security at MitigLane.
How to report a vulnerability, how Arcturiq handles what it collects, and what this website does with your visit.
Found something? Tell us.
Email us with what you found and how to reproduce it. The disclosure policy says how we handle reports.
Contact: mailto:security@mitiglane.com Expires: 2027-11-07T10:17:13.000Z Preferred-Languages: en Canonical: https://mitiglane.com/.well-known/security.txt Policy: https://mitiglane.com/security/disclosure/
Signed, separated, and narrow.
Signed at the source
Every result is signed before it leaves the sensor or the device, and Arcturiq checks the signature before it decides anything.
Kept apart
Which customer a result belongs to comes from the authenticated connection, never from the data sent.
On your Linux servers: a fixed list of commands
A small kit installed once gives the sensor a restricted login that runs only the commands Arcturiq lists.
On your endpoints: only its own device
The agent connects outbound only, and reports only about the device it is installed on.
Downloads you can check
The sensor and the agents are signed, from one constant link, with a fingerprint published apart from the service.
This website
No cookies, no analytics and no third-party scripts. Fonts are served from this site, and a theme choice stays in your browser’s local storage.