Trust / Security and assurance

Security claims need scope and evidence

Omnimesh distinguishes its current organisational security status, public-service dependencies and development-stage product evidence.

Cyber Essentials is organisational certification. It is not certification, validation or approval of the Omnimesh transport system.

Current position

What is established today

Organisational hygiene, public-service dependencies and product assurance are related but distinct. Cyber Essentials covers the organisation's baseline controls; it does not validate the Omnimesh product.

01

Verified organisation

Cyber Essentials

OMNIMESH LTD holds verified Cyber Essentials certification covering baseline organisational cybersecurity controls.

Not product assurance
02

Development stage

Product evidence

Architecture and protocol specifications are being finalised before further MVP implementation and controlled evaluation.

Evidence in progress
03

Public services

Third-party infrastructure

GitHub and Vercel form part of the current development and public-website toolchain; their use is not presented as a UK-only supply chain.

Dependency boundary
04

Contact handling

Sensitive information

Classified, operationally sensitive, special-category personal or detailed vulnerability information should not be sent through the general form.

Minimise first contact

Assurance boundary

What this page does not claim

×

Government, defence, NCSC or critical-infrastructure approval.

×

Production readiness or operational suitability.

×

Independent validation of product security or resilience.

×

Anonymity, metadata protection, post-quantum assurance or nation-state resistance without defined and measured evidence.

Security contact

Begin with a minimal, non-sensitive report

Use the responsible-disclosure route for suspected vulnerabilities. General business enquiries should continue through the standard contact form.

Security concern

Read scope and reporting guidance first

The disclosure page defines what can be tested, what to exclude and what information to send initially.

Responsible disclosure