Trust & security

Security you can audit — starting with our own.

Maigadi protects sensitive networks, so it's built to be trustworthy by design: passive, on-premise, least-privilege, and accountable.

How we handle your data

Sovereign by architecture.

Your data stays on your site

Maigadi reads a copy of traffic from a SPAN/TAP and runs core detection on-premise. Nothing is required to leave your network — and you control any egress, by policy.

Least-privilege access

Role-based access control (viewer, investigator, admin) keeps people scoped to what they need.

Full accountability

A complete audit trail records who did what, and when — from investigations to configuration changes.

Air-gap & update integrity

Run fully offline. When you choose to update, packages are signed and customer-controlled — online by policy, or via offline bundles for air-gapped sites. Never phone-home by default.

Our own posture

We hold ourselves to the same bar.

This site is served over HTTPS with a hardened configuration and minimal third-party code. We publish a security.txt for coordinated disclosure — if you find an issue, please tell us.

Certification roadmap. We're building toward formal assurance: alignment to IEC 62443 and a SOC 2 programme are on the roadmap. We'd rather show you a clear-eyed plan than claim a badge we haven't earned.

Questions about security or compliance?

Ask us anything — data handling, deployment, or framework mapping.