Security
Security at NeoTechX
What our products implement today, what is in development, where the services we host run, and how to report a vulnerability. Status labels show what exists now.
How do NeoTechX products secure telecontrol?
| Feature | Where | Status |
|---|---|---|
| IEC 62351-5 secure authentication (HMAC-SHA-256, AES-256 key wrap) | NeoCore, DNP3 and IEC 104 | Available |
| TLS on DNP3 and IEC 104 | NeoCore | Available |
| Security event counters exposed as tags | NeoCore | Available |
| Hardened field image for gateways | NeoCore gateway image | In development |
NeoTechX states that its products implement these standards. No third-party certification is claimed. The IEC 104 device profile and IEC 62351-5 PICS are available on request. See NeoCore security.
NeoShift gateway security architecture
In development Planned design; not on the current gateway image
NeoCore at NeoShift sites is being designed to initiate every connection itself and listen on no port, to use mutual TLS with per-device certificates, to keep keys in a TPM or secure element, and to accept only signed updates, with signing keys held offline. In Phase 1 the gateway only reads data, and its network access is agreed with each customer's IT team.
Read the NeoShift safety design.
Where are NeoTechX services hosted?
Hosted exclusively in Canadian data centres, supporting BC public bodies' obligations under FOIPPA.
The services NeoTechX hosts (this website, form handling, hosted NeoPilot dashboards and the NeoShift platform, with their backups) run on NeoTechX's virtual server in a Canadian data centre. Form submissions are stored only there. Notification emails to NeoTechX staff carry no personal data. Fonts are served from this site, and bot protection is self-hosted, so no third-party script runs on these pages.
Each public body remains responsible for its own privacy assessment.
| Sub-processor | Purpose | Location |
|---|---|---|
| Hosting provider (to be named once confirmed) | Virtual server for website, forms and hosted services | Canada |
Privacy
NeoTechX handles personal information under British Columbia's Personal Information Protection Act and, for cross-border commercial activity, PIPEDA. Read our privacy policy or write to info@neotechx.ca.
How do I report a vulnerability?
- Email info@neotechx.ca with the product, version and steps to reproduce.
- Please give NeoTechX reasonable time to investigate before disclosing publicly.
- NeoTechX does not run a bug bounty programme.
Machine-readable contact: /.well-known/security.txt