Philosophy¶

Software design¶

EnforceGate vX is designed to serve as a lightweight, straightforward, and robust secure web gateway, enabling rapid deployment on commodity hardware. It supports a diverse range of deployment scenarios — from preventing data exfiltration on a handful of servers, to safeguarding thousands of workstations against malware and phishing campaigns.

Operators control web traffic using Access Control Lists (ACLs) modelled after industry standards from Cisco Systems and Juniper Networks.

All features are configurable via a command-line interface (egctl, egpolicy) in a matter of seconds, with no need for a graphical interface or a browser. Policies themselves are plain-text files — operators edit them directly with the editor of their choice (vi, nano, or any other), no proprietary tooling required. The captive portal renders an in-product landing page in the visitor's language whenever the engine decides to warn the visitor, accept or block access to the destination website, so end users see useful explanations rather than generic browser errors.

The underlying software architecture prioritises simplicity, high performance, and security.

Development strategy¶

Our software is developed using a combination of proprietary and open-source components, primarily libraries and tools. By leveraging the strengths of both approaches we deliver innovative solutions at a competitive price.

Each release undergoes rigorous security testing, with particular emphasis on identifying memory-corruption vulnerabilities and logical errors. Release images are signed end-to-end with cosign against a hardware-held release key whose private half never exists as a file on disk. A build-time SHA-256 manifest is shipped inside the image and re-verified at every container boot — plus continuously by a long-running watcher — so post-deploy tampering with the engine, connector, or operator CLIs is detectable.

All software solutions are developed exclusively at our headquarter in the Swiss Alps. We do not engage external suppliers or subcontractors for development, enabling full control and independence over our products.

Open source¶

At Exosys, we embrace the open-source software model. We plan to open and share portions of the source code from our commercial offerings with the community, enabling users to enhance the EnforceGate solution with their own features, tools, and customisations.