DaDesktop is built by NobleProg Tech entirely in-house, and all aspects—development, maintenance, and support—are handled by our dedicated team of Security Operations, Developers, and DevOps professionals. Only authorized NP Tech personnel can access the core DaDesktop infrastructure.
NobleProg holds full access and the rights to modify all source code as needed.
Redundancy and Disaster Recovery
Trainers and users have the option to replicate the entire desktop in real time using the remote replica feature.
During experiments, you can enable automatic desktop snapshots. If something goes wrong, the system can quickly roll back to the last stable state.
Our servers run in geographically redundant data centers. Should one fail, another takes over with minimal latency.
The DaDesktop infrastructure spans multiple global data centers, all protected by rigorous physical and digital security policies.
DaDesktop relies on QEMU/KVM for creating and managing virtual machines. Because these are integral components of the Linux operating system, security patches can be rolled out effortlessly and instantly—no third-party dependencies to worry about. QEMU/KVM also boasts a stellar track record for security and performance, often surpassing commercial alternatives.
Zero-Trust Policy at NobleProg
Access to NobleProg and DaDesktop systems is restricted to NP Tech staff with pre-registered IP addresses. We employ iptables firewall rules to block SSH and other ports from unauthorized sources.
Every system requires two-factor authentication plus a password. Even if an attacker got hold of a password, they'd still be locked out—their IP isn't whitelisted, and they wouldn't have the required one-time code.
During a DaDesktop course, each desktop network is completely isolated from others and from public internet access.
All NobleProg staff must use multi-factor authentication (MFA) to log into NobleProg or DaDesktop. If a team member leaves, their access is revoked instantly to prevent any unauthorized entry.
Linux System Hardening
DaDesktop server nodes run on a minimal, custom-built version of Ubuntu that we maintain ourselves, with only essential packages installed. This drastically reduces complexity and overhead, meaning fewer potential vulnerabilities and fewer services running. Typically, each node's footprint is just 250 MB.
Direct root access is disabled in SSH.
The DaDesktop infrastructure runs on the latest stable Ubuntu LTS and receives automatic updates and patches, significantly lowering the risk of zero-day exploits.
We continuously monitor servers for known vulnerabilities.
Any unused packages or files are promptly removed.
Since NobleProg has full access to the project's source code, if a vulnerability is discovered and no official patch exists yet, our security team can develop and apply a fix right away.
Systems are kept up to date through automatic unattended upgrades.
All outbound connections from our servers to the dark web are monitored and can be automatically blocked if needed.
Comprehensive Monitoring
NobleProg continuously monitors all servers, including those running DaDesktop, and generates alerts for any problems that require attention. Alerts are promptly investigated and resolved, and we regularly review past alerts to prevent recurrence.
We track CPU, memory, and network activity across all DaDesktop servers and both trainer and participant machines. Additionally, we monitor every node and the entire DaDesktop system for any Common Vulnerabilities and Exposures (CVEs). While security updates are usually applied automatically, any flagged exceptions are handled manually or mitigated quickly.
Fresh Start machines on each course are automatically recorded, allowing us to review any issues that arise during trainer preparation. You can also optionally record the Trainer's machine and the Training Room during a session. This feature is fully controllable via the UI and can be turned off at any time.
DaDesktop OS templates are refreshed roughly every two weeks, incorporating the latest security patches.