HARDWARE & FIRMWARE SECURITY POSTURE // CERT-IN COORDINATED

Security Disclosures & Integrity

MedhaArc maintains zero tolerance for compromised supply chains, backdoors, or unencrypted telemetry in critical autonomous infrastructure.

COORDINATED VULNERABILITY DISCLOSURE (CVD)•PGP KEY ID: 0xMEDHAARC2026

01.Anti-Tamper & Sovereign Supply Chain

Unlike consumer drones assembled with foreign black-box modules, MedhaArc engineers printed circuit board assemblies (PCBAs) in-house. All microcontrollers, motor controllers, and sensor interfaces undergo rigorous component verification to prevent hardware Trojans or undocumented communication channels.

Flight critical firmware binaries are cryptographically signed with ECDSA P-256 keys prior to flashing, ensuring tamper-evident boot integrity across our entire hardware fleet.

02.Encrypted Telemetry & Anti-Jamming

// FHSS HOPPING FREQUENCIES

Rapid pseudorandom frequency hopping across 2.400–2.483 GHz to resist RF jamming and interception.

// CAN-BUS ISOLATION

Optically isolated dual CAN-FD networks separating mission sensors from flight-critical motor actuators.

03.Vulnerability Disclosure Program (VDP)

We welcome responsible disclosures from security researchers, academic labs, and ethical hackers regarding our web portals, ground station software, or firmware stacks.

• Reporting Protocol: Send findings with reproducible proof-of-concept to security@medhaarc.com.

• Safe Harbor: Good-faith research following coordinated disclosure guidelines will not be subject to legal claims.

• Response SLA: Initial triage within 48 hours; engineering remediation updates provided every 7 business days.

MedhaArc Cyber Security Response Team

PGP Key available upon email request // CSIRT Node India

Submit Security Report →