# Black Swan Net

> Black Swan Net is a secure communications program developing dedicated full-Linux endpoint appliances for direct, mutually authenticated sessions between authorized devices.

Black Swan Net is in active product development. The public record does not claim general availability, an operational customer deployment, certification, government approval, CUI or classified authorization, SCIF equivalence, anonymity, invulnerability, zero metadata, zero endpoint risk or guaranteed availability.

## Selected architecture

- Synchronized direct peer sessions only.
- No Black Swan-operated message server, vendor queue, cloud message store, identity service, directory, relay, push service or vendor key custody participates in the selected communications session.
- If the peer is unavailable, no message is transmitted or deposited with Black Swan infrastructure.
- Endpoint-bound authorized identity replaces phone-number, SIM, email and vendor-account identity.
- The selected production endpoint direction is full Linux. Android and GrapheneOS are historical exploration and hardware-discovery references.
- Direct-only operation reduces selected dependencies but does not eliminate metadata, endpoint risk, traffic analysis, coercion, jamming or denial of service.

## Product family

- [Black Swan Direct](https://blackswannet.com/secure-communications-appliance/#direct): stock Pixel 10a reference track; active development.
- [Black Swan Sovereign](https://blackswannet.com/secure-communications-appliance/#sovereign): RED/GREEN dual-WLAN high-assurance engineering proposal pending implementation and test.
- [Black Swan Gateway](https://blackswannet.com/secure-gateway/): trusted-workstation path through the Sovereign boundary without ordinary Internet access; architecture direction pending implementation and test.
- Black Swan Assurance: maintained releases, vulnerability response, fleet renewal, incident support, replacement, secure logistics, depot lifecycle and evidence.

## Public pages

- [Home](https://blackswannet.com/)
- [Product architecture](https://blackswannet.com/secure-communications-appliance/)
- [Government](https://blackswannet.com/government/)
- [Government evaluation](https://blackswannet.com/government-evaluation/)
- [Defense](https://blackswannet.com/defense/)
- [Critical infrastructure](https://blackswannet.com/critical-infrastructure/)
- [Enterprise](https://blackswannet.com/enterprise/)
- [Executive security](https://blackswannet.com/executive-security/)
- [Family office](https://blackswannet.com/family-office/)
- [Legal](https://blackswannet.com/legal/)
- [Investigations](https://blackswannet.com/investigations/)
- [Secure Gateway](https://blackswannet.com/secure-gateway/)
- [Integrators](https://blackswannet.com/integrators/)
- [FAQ](https://blackswannet.com/faq/)
- [Security news](https://blackswannet.com/news/)
- [Request briefing](https://blackswannet.com/contact/)

## Latest security news

<!-- NEWS-LLMS:START -->
- [Your management plane is a master key. CISA says one is being exploited.](https://blackswannet.com/news/2026/08/management-plane-active-exploitation/): On August 3—five days before this analysis—CISA added an N-able N-central authentication-bypass vulnerability to its Known Exploited Vulnerabilities catalog. The confirmed fact is active exploitation. The operational warning is broader: a system authorized to manage an endpoint fleet can concentrate risk across that fleet.
- [The router between you and the mission may already belong to someone else](https://blackswannet.com/news/2026/08/router-hygiene-state-targeting/): A July 2026 NSA-led advisory says Russian FSB actors continue to exploit weakly configured and vulnerable routers across communications and other critical sectors. The warning is about more than patching: every shared dependency inside a sensitive conversation belongs in the threat model.
<!-- NEWS-LLMS:END -->

## Initial-contact safety

Do not submit classified, CUI, export-controlled, privileged, case-specific, credential, vulnerability, source-identity, evidence, customer-confidential or operationally sensitive information through the public website or ordinary email.