PRODUCT INTEGRATION AND DATA SHARING

Three products for different parts of security and IT support.

Frame is being built to report Windows security status. Gate is the IT team's place to manage company devices and support tickets. Pen is being built to assess only approved targets. These products are planned to connect through limited, permission-checked findings, not through one unrestricted control channel.

How Frame reports to Gate

CitadelFrame and CitadelGate are designed to work together. Frame runs on a Windows computer and sends a limited security-status report to Gate after an administrator connects that computer.

  1. 1

    An administrator connects the computer

    An authorized IT administrator sets up the organization in Gate and pairs the specific Windows computer. Gate is not intended to accept an unknown device as part of an organization.

  2. 2

    Frame sends a short status report

    The report can include the check results, a score, the time of the report and the Frame version. This connection does not send the computer's files and does not carry remote-control commands.

  3. 3

    The IT team sees the report in Gate

    Gate is designed to keep each report with the organization that enrolled the device, so its authorized team can review the latest status.

BUILT AND TESTED IN SOURCE

What has been checked

Automated tests and a paired Frame-to-Gate test have passed with a disposable test database and synthetic device. That proves the software path can exchange a report in a test setup; it does not prove a customer device is connected to the live service.

CUSTOMER RELEASE STILL PENDING

What is not ready yet

The Frame installer is not available for download. A clean Windows install and update test, a signed installer and a real enrolled-device check are still required before this can be offered as a supported service.

Important: this connection only reports status. It does not let Gate take control of a PC. Any separate remote-management feature requires its own access controls and release checks.
Where Pen fits: CitadelPen is being developed for assessments of systems the customer owns or has written permission to test. An approved finding is planned to become a Gate ticket for the responsible IT team to review. Pen authorization does not grant Gate permission to control a device. This handoff is not live yet.

Check whether Frame can be downloadedSee product progress

Technical details for IT administrators

The source uses a pre-enrolled, device-scoped credential over HTTPS. On Windows, the credential is entered through the hidden pairing prompt and protected using machine-scope encryption and a restricted file ACL. Reports are limited to a score, observation time, Agent version, and check identifiers with status values. Production enrollment and end-to-end report readback are not yet accepted.