Security

DaDesktop is created by NobleProg Tech and handled entirely in-house. Any problems are quickly resolved by our own dedicated team of security operations, developers, and DevOps engineers. No one outside NP Tech can access the core DaDesktop system.
NobleProg retains full access to, and the right to alter, all source code.

Both trainers and learners can choose to mirror an entire desktop in real time using the remote replica feature.
During experiments, you can turn on automatic snapshots of a desktop. If something crashes, the system can roll back to the last working state.
Our servers are spread across redundant data centres; should one centre fail, another is ready nearby with minimal latency.
The DaDesktop backbone relies on multiple data centres around the world, all guarded by strict physical and IT security protocols.
DaDesktop employs QEMU/KVM to spin up and manage virtual machines. Both tools are built right into the Linux OS, which makes deploying security patches both simple and fast—there's no dependency on any outside provider. QEMU/KVM has a strong reputation for security and speed, often outperforming commercial alternatives.

Only NP Tech team members with pre-registered IP addresses are permitted to reach the NobleProg and DaDesktop systems. We use iptables firewall rules to block SSH and other ports for everyone else.
Every system is locked behind two-factor authentication plus a password. Even if someone managed to steal a password, they couldn't get in—their IP wouldn't be on the whitelist, and they'd lack the one-time code.
During a DaDesktop course, each desktop network is kept isolated from other desktops and from public internet access.
All NobleProg employees must use a multi-factor authentication (MFA) system to log into NobleProg or DaDesktop resources. The moment someone leaves the company, their access is revoked immediately to prevent any unauthorised intrusion.

Each DaDesktop server node runs a very lean, customised version of Ubuntu that we build ourselves. We only install the packages it truly needs, cutting away unnecessary complexity and overhead. This reduces the attack surface because fewer packages mean fewer services running at any given moment. Typically, each node's installation is just around 250 MB.
Root login over SSH is turned off.
The DaDesktop stack always runs the latest stable release of Ubuntu, with automatic upgrades and patches applied. This helps slash the risk of zero-day threats.
We continuously scan our servers for known vulnerabilities.
Any unused packages and files are cleaned out.
NobleProg holds full access to all project source code. If a vulnerability is spotted and no official fix exists yet, our security team can apply a patch straight away.
Systems are kept up to date via unattended-upgrades.
All traffic from our servers to the dark web is watched and can be blocked automatically.

NobleProg keeps a close watch on all its servers—DaDesktop included—and fires off alerts as soon as something needs attention. Every alert is investigated and resolved. We regularly review past alerts and issues to make sure we've truly fixed the root cause and prevented repeats.
We track CPU, memory, and network activity across every DaDesktop server and each trainer or participant machine. On top of that, all DaDesktop nodes and the core system are constantly checked for any known CVEs; these get flagged on our monitoring dashboard for review. Security patches are usually deployed automatically, but if something unusual shows up, our team steps in with manual fixes or other countermeasures.
Fresh Start machines on courses are recorded automatically, allowing us to spot any problems a trainer might have when setting up. Optionally, we can also record the trainer's machine and the training room itself during a session. All of this is fully controllable from the interface and can be turned off when not needed.
Our DaDesktop OS templates get refreshed roughly every two weeks, always carrying the latest security updates.