Software Update Server

Signed release packages for the Cyber Privacy platform. Every package is verified against Cyber RT's public key before a byte of it is trusted — this server can delay a release, or serve an old one, but it can never forge one.

Requests are authenticated by licence token over TLS. Each package is pulled by the internal server, either directly or through the DMZ forwarder, and its signature is verified before it is applied. A backup is taken first, and a failed health check triggers an automatic rollback.