Embention releases upgraded Veronte KAI FCC for One-Way drones at MSPO
Discover Veronte KAI 2.2 with AI-based PNT, terminal guidance and scalable production for one-way drones in contested environments.
Cybersecurity has become a critical imperative across AAM industry, safeguarding sensitive data, protecting operational continuity, and mitigating risks in an increasingly digital ecosystem.
Embention addresses these challenges through a robust cybersecurity framework, including stringent internal security policies, ISO 27001 cybersecurity certification, and secure communication protocols for critical systems. This comprehensive approach demonstrates Embention’s commitment to excellence in risk management and secure operations.
ISO 27001 cybersecurity certification
Embention is certified under the ISO 27001, reinforcing its commitment to the highest standards of information security and privacy. This achievement demonstrates that the Information Security Management System (ISMS) meets the stringent requirements of this international standard. ISO 27001 compliance ensures the security of its infrastructure and systems, protecting both company and customer data.
The ISO/IEC 27001 standard provides best practices for establishing, implementing, maintaining and continually improving an information security management system. Embention has information systems that support all activities related to the design, development, manufacturing and support processes for unmanned autonomous vehicles (UAVs) and manned aircraft (eVTOL), ensuring the management of risks related to data security.
In addition, Embention meets the ISO9001 and EN9100 quality standards, which guarantee the highest quality and management standards in the aerospace industry. Also, develops its products under the strict DO178C, DO254 and DO160G certification standards. These certifications ensure that all its systems are reliable and safe for safety-critical operations, facilitating aircraft certification processes and meeting the most demanding international regulations.
On the other hand, Embention has the Habilitación de Seguridad de Empresa (HSEM) granted by the National Intelligence Center (CNI). Thanks to this clearance, Embention has access to projects that contain classified information. The company also has stablished a security manager role, holding the Habilitación Personal de Seguridad (HPS), which enables him to manage confidential information within these projects. These accreditations strengthen Embention’s ability to operate in critical sectors and ensure that its information systems are managed with the highest security measures.
Veronte Cloud infrastructure and applications
Authentication and authorization
Veronte applications use a secure managed identity and access management (IAM) service to authenticate users through the user-password flow. Once authenticated, users receive JWT tokens that are used to validate their identity in subsequent requests.
To ensure session security, the system implements token rotation using refresh tokens, which allow credentials to be renewed without requiring a new login.
In addition, all calls to protected services in Veronte Cloud are properly authenticated by validating the JWT token, ensuring that only authorised users can access resources.
Robust infrastructure | Event-Driven microservices
The infrastructure consists of two Vitual Machine instances behind a Load Balancer that communicate with the services to manage Autopilot communications, query vehicles assigned to users, and handle the upload and download of Veronte Autopilot configurations.
All external communications are over HTTPS using TLS 1. 2 and are protected by an API Gateway that validates JWT tokens to ensure authentication and authorisation of requests.
For internal communications between microservices, the OAuth 2.0 client credential flow is implemented using JWT tokens that ensure mutual authentication and limit the validity of credentials.
This architecture provides security in both external and internal communications through the use of encrypted protocols and strong authentication mechanisms.
The communications security infrastructure provides a robust approach, highlighting the use of IAM with token rotation and token refresh, which enables secure and dynamic session management.
Stability guarantee
Restriction of time-critical modifications in flight time
Veronte Autopilot incorporates a safety mechanism that, once enabled, blocks the modification of critical autopilot parameters during flight. This protection ensures that no essential configuration can be changed while the aircraft is in flight, maintaining flight integrity and safety at all times.
Communications protocol
Secure communications within the Veronte Ecosystem are facilitated through the proprietary Veronte VCP (Veronte Communications Protocol), which utilises unique autopilot identification data to establish exclusive communication channels with specific units, effectively preventing unauthorised third-party access. Looking ahead, Embention is advancing its security framework by integrating the NATO-standard STANAG 4586 protocol and AES encryption within the autopilot to further enhance data protection and interoperability, reinforcing its commitment to robust, future-ready autopilot solutions.
