Trust Center
Trust is built from claims that can be examined
This is the public index for how AstraSutra states product evidence, current limitations, engineering discipline and reporting boundaries. Follow each claim to its supporting record, understand its limits and identify the questions that matter for your evaluation.
- Publisher
- ASTRASUTRA PRIVATE LIMITED
- Register status
- Public trust register · reviewed 07 October 2026
How to read the evidence
Five states, each with a different burden of proof
These states are not a maturity score and do not form a progress percentage. They keep a demonstrated mechanism separate from target-environment assurance, future design and explicit exclusion.
Implemented
A named mechanism exists on the selected reviewed path.
Tested
Repeatable repository evidence exercises the named claim.
Deployment-dependent
Assurance requires a target environment or control not proved by the reviewed lab.
Design proposal
A documented direction that is not available product behaviour.
Out of scope
A capability or implication explicitly excluded from the current claim.
Public evidence directory
Begin with the claim, then follow its boundary
Product evidence
Q-Kavach public dossier
Selected post-quantum identity, agent-authority, delegation, lifecycle and evidence paths—with deployment dependencies and exclusions beside them.
Open the record
Product evidence
Drushtikosh public dossier
Research-lab custody decisions, separated authority paths, bounded offline mechanics and the production controls that remain unclaimed.
Open the record
Engineering method
Internal engineering-evidence method
The claim, test, finding, remediation, separate re-verification and dated-release sequence used to make technical uncertainty visible.
Open the record
Decision library
Notes for evaluators
Original briefings on procurement, delegated identity, disconnected operation, evidence integrity, privacy and authority separation.
Open the record
Current product boundaries
What the public record says today
Each product has its own architecture and evidence boundary. They are not presented as an integrated platform.
Cryptographic identity
Q-Kavach
Selected development paths expose implemented and tested identity mechanisms. Protected-resource enforcement, external assessment, certification and scale remain separate gates.
Current status: pre-certification and pre-scale; no production customers at scale are claimed.
Read the dated dossierGoverned data custody
Drushtikosh
The research lab demonstrates selected custody, authority, release, offline and evidence mechanics. Production host/media enforcement and hardware-rooted controls remain target-environment work.
Current status: single-machine research lab; production enforcement, certification and a scoped pilot are not claimed.
Read the dated dossierStandards and guidance
Reference lenses, never borrowed authority
These primary sources help frame governance, development, buyer and publication questions. Their presence here is not a conformity claim, certification, endorsement or external assessment of AstraSutra.
- NIST Cybersecurity Framework 2.0 (opens in a new tab)Governance and risk-conversation lens
- NIST Secure Software Development Framework 1.1 (opens in a new tab)Secure-development evaluation lens
- CISA Secure by Demand (opens in a new tab)Buyer-question lens for product evaluation
- RFC 9116 — security.txt (opens in a new tab)Publication format for the reporting route
- Guidelines for Indian Government Websites 3.0 (opens in a new tab)Public-service usability and accessibility reference
Security reporting
Request an appropriate channel first
If you believe you have identified a security concern involving this website or an AstraSutra product, use the security-specific Contact topic to request the next step. The initial form is a routing channel, not a secure evidence-transfer channel.
Do not send secrets, credentials, exploit details, classified data, personal data or sensitive findings through the ordinary form. Provide only enough non-sensitive context to arrange an appropriate channel.
Access and privacy
Practical commitments, stated without a badge
The site is built with semantic page structure, keyboard-operable navigation and controls, responsive layouts, visible focus treatment, dark and light themes, and a reduced-motion path. These are implementation practices, not a claim of external WCAG or GIGW certification.
The Contact form sends submitted details by email to the recipients identified in the Legal notice. The site does not use an analytics pixel. If an access barrier prevents you from reading or using a public page, contact us with the page and the assistance needed—without including sensitive information.