Where every Prismara product stands.

Build v0.6.0

Working today

OpenID Connect provider with passkeys, security keys and TOTP, Windows and Linux sign-in, post-quantum tokens, SCIM, admin portal and audit, plus app roles, per-app sign-in strength, API scopes and dynamic groups. Independently security-reviewed; 588 automated checks.

Next

Live interoperability with Admin and Mail and Windows 11 hardware runs, then conditional access and SAML/Entra federation.

Availability

SovSec internal first; clients after SovSec's go-live in October 2027.

Build v0.3.0

Working today

Own mail server with filtering, sealed mailboxes, calendar and contacts, admin centre, signatures, Exchange Online/IMAP migration, sealed journaling, MailTips, recall, S/MIME verification and a one-command self-hosting installer. Fuzz-tested and independently security-reviewed.

Next

SovSec internal pilot on a dedicated server, journal ingest in Gov, S/MIME signing and decryption in the web client, and a penetration test.

Availability

SovSec internal pilot next; clients after SovSec's go-live in October 2027.

Build v0.3.0

Working today

Prototype with post-quantum hybrid end-to-end encryption, post-quantum-only TLS, Prismara Identity single sign-on on web and desktop, Prismara Admin licensing on every request and the app launcher. Independently security-reviewed; the full messaging feature set is not built yet.

Next

Alpha at talk.prismara.eu, PostgreSQL with row-level security, the MLS standard for group encryption and core messaging features; calls and meetings follow in Phase 2.

Availability

Alpha for SovSec next; clients after SovSec's go-live in October 2027.

Build v0.6.0

Working today

All four apps are built: Geode, Folio, Lattice and Lumen, with end-to-end encrypted co-editing, Microsoft and OpenDocument formats both ways, and a Linux desktop app with signed updates. 1,309 public test files open without a crash; the v0.6 build has been independently security-reviewed.

Next

Accessibility audit, Windows and macOS desktop runs, verification of exports in Microsoft Office, and Firefox and Safari support.

Availability

SovSec internal first; clients after SovSec go-live in October 2027.

Build v0.6.0

Working today

Encrypted personal storage with folders, version history, on-device search and view-only and password-protected sharing links, opening files into Folio, Lattice and Lumen. Part of the independently security-reviewed Work v0.6 build.

Next

Accessibility audit, Windows and macOS desktop runs, verification of exports in Microsoft Office, and Firefox and Safari support.

Availability

SovSec internal first; clients after SovSec go-live in October 2027.

Build v0.6.0

Working today

Encrypted real-time co-editing with comments, suggestions, Commenter role, tables, images, footnotes, page setup and version history; .docx and .odt both ways. Part of the independently security-reviewed Work v0.6 build.

Next

Accessibility audit, Windows and macOS desktop runs, verification of exports in Microsoft Office, and Firefox and Safari support.

Availability

SovSec internal first; clients after SovSec go-live in October 2027.

Build v0.6.0

Working today

Built: fast recalculation (adding rows at 100,000 formulas in 53 ms), dynamic arrays compatible with Excel and LibreOffice both ways, and threaded cell comments with roles. 685 public workbooks with 49,288 formulas calculate. Next for Lattice: LET/LAMBDA and pivot tables.

Next

Accessibility audit, Windows and macOS desktop runs, verification of exports in Microsoft Office, and Firefox and Safari support.

Availability

SovSec internal first; clients after SovSec go-live in October 2027.

Build v0.6.0

Working today

Built: build animations (entrance, emphasis, exit; paragraph builds) with an animations panel, presenter view, .pptx and .odp both ways, and printable notes pages and handouts. Next for Lumen: SmartArt.

Next

Accessibility audit, Windows and macOS desktop runs, verification of exports in Microsoft Office, and Firefox and Safari support.

Availability

SovSec internal first; clients after SovSec go-live in October 2027.

Build Prototype

Working today

Phase 0 specification agreed; the Phase 1 prototype is in development.

Next

Complete the Phase 1 prototype with Prismara Work integration and desktop sync.

Availability

SovSec internal first; clients after SovSec go-live in October 2027.

Build Phase H

Working today

The v1.0 technical specification is fully implemented at prototype fidelity (phases A–H): Microsoft Graph ingest, correlation engine, live incident console, threat hunting, report auto-fill, pseudonymisation with a per-tenant Identity Vault, partner scoping and single sign-on. Single sign-on has not yet been tested against a live identity provider, and the Edge Relay is not built.

Next

Production deployment: real Entra app registration, TLS, secret store and CI.

Availability

Delivered as SovSec's own MXDR service; for clients after SovSec's go-live in Oct 2027.

Build pre-0.1

Working today

The Linux kernel probes for telemetry and execution blocking load and attach on an Ubuntu 6.8 kernel, and the post-quantum cryptography library is built. The sensor userspace, XDR hub and console are not yet written.

Next

Signed policy bundles and response actions, then the sensor userspace, hub and console.

Availability

SovSec internal first; clients after SovSec's go-live in Oct 2027.

Build v0.5.0

Working today

v0.5 runs on Linux with a single or high-availability controller, gateway, agent, admin CLI and web console, Prismara Admin licence enforcement and native post-quantum Prismara Identity tokens; it passes 300 of 300 end-to-end tests on a real kernel and has been independently security-reviewed. Windows and macOS agents are written but not yet run on real machines.

Next

First real Windows and macOS runs, a multi-core gateway, ML-DSA keys in an HSM, device attestation, a Windows kill switch and a macOS network extension.

Availability

SovSec internal first; clients after SovSec's go-live in Oct 2027.

Build v0.4.0

Working today

v0.4 covers classification, labels and DLP, retention, holds and crypto-shredding, eDiscovery, insider risk, communication compliance, information barriers, Compliance Manager, DSPM, PIM, Customer Lockbox and Priva subject requests, plus Gov Scanner, Gov Connect, a data catalogue, local trainable classifiers and Data Security Investigations. Independently security-reviewed.

Next

Integration into Prismara Work and Endpoint Security, communication compliance for Talk and Mail, and Microsoft 365 and Exchange migration connectors.

Availability

SovSec internal first; clients after SovSec's go-live in Oct 2027.

Build M4

Working today

In development at milestone M4. The first release is scoped as validation-only: signed scope enforcement, intensity capped at T2 with no real exploitation, passive-only around OT and ICS, and a generated report after each test.

Next

Complete the validation-only first release as a multi-tenant platform; self-hosting in Prismara Cloud later.

Availability

Delivered only as a SovSec-operated service, never for self-service use.

Build Chromium 155

Working today

Hardening patches on Chromium 155, SOC event reporting, runtime policy watchdog and type-based dangerous-download blocking are written and tested; the new patches have been independently security-reviewed.

Next

Full browser builds on a dedicated build host, signed update checks and Prismara branding.

Availability

SovSec internal pilot first; clients after go-live.

Build v0.2.0

Working today

Zero-knowledge vault with OPAQUE sign-in, hybrid post-quantum crypto, signed manifests and key transparency; desktop app, SSH agent and secrets provider on Prismara OS; TPM-sealed Secret Key, PIN unlock and FIDO2 device approval. Independently security-reviewed.

Next

Phase 2: browser extensions, sharing, organisations and a penetration test.

Availability

Prismara OS first; Windows, macOS and other platforms later.

Build v0.3.0

Working today

Tenants, subscriptions, group-based licensing, partner hierarchy with customer-initiated invitations, custom roles, billing statements, licence-change history, message centre, signed entitlements and provisioning events. Independently security-reviewed.

Next

Wiring the launcher, entitlements and events into each app (Identity first), Identity single sign-on for Admin, signing-key custody and scheduled report e-mails.

Availability

SovSec internal first; MSPs and clients after SovSec's go-live in October 2027.

Build v0.3.0

Working today

The Linux agent works end to end; native Windows MDM, Apple MDM and the Android controller are tested against simulated devices. Version 0.3 adds BitLocker recovery-key escrow with second-admin approval, tenant-pinned enrolment files and a console demo mode, and has been independently security-reviewed.

Next

Testing on real devices (Windows PC, iPhone and Mac, Android and GrapheneOS) and signed, tenant-branded installers.

Availability

SovSec internal first.

Build v0.5.0

Working today

Signed actions, two-person rule, end-to-end encrypted sessions and auditor-only recordings, plus new standing orders (scheduled scripts, patch policies, software states) and signed software deployment via winget, apt, dnf, zypper and Homebrew. Independently security-reviewed; a demo tenant is available.

Next

Real Windows and macOS runs, SUSE and RHEL agents, Prismara Admin integration, a penetration test and WebRTC remote desktop.

Availability

SovSec internal first; MSPs and clients after go-live in October 2027.

Build v1.5

Working today

Alpha, renamed from Tesseract Service Desk to Prismara Desk. ITIL 4 incidents, problems, changes, requests, knowledge and monthly SLA reports, with sign-in through Prismara Identity (Entra as fallback) and post-quantum TLS on the front end. New: an email channel (v1.4) and scanned, encrypted attachments (v1.5).

Next

Prismara branding, SLA report delivery by email, CRM billing hook and a penetration test.

Availability

SovSec internal first; clients after go-live in October 2027.

Build Alpha

Working today

Contacts, companies, deals, activities, reports, lead scoring, reminders, signed web forms, lead API, Microsoft 365 sync and multi-tenant domains. Website lead capture from sovsec.com and prismara.eu is built, tested end to end and independently security-reviewed; it is switched on once the CRM is deployed. Post-quantum TLS protects the front end.

Next

Prismara Identity and Admin integration, PostgreSQL row-level security, then a full security review and penetration test.

Availability

SovSec internal first, starting with website leads; clients later.

Build v0.7.0

Working today

Personnel records with field-level encryption, Austrian legal workflows, time tracking, payroll export, self-service, travel expenses, whistleblowing channel, GDPR tooling, directory and CSV import, on Prismara Identity, Admin and Mail. Independently security-reviewed.

Next

Legal and data-protection sign-off on the Austrian rules, DPIA, penetration test, e-signature, BMD/RZL payroll export and collective-agreement pay tables.

Availability

SovSec internal first; Austrian clients after SovSec's go-live in October 2027.

Build Phase A

Working today

Phase A is a single-page web app covering projects, time, resourcing, quoting, invoicing, expenses and procurement for resale, with demo and live modes.

Next

Completing Phase A and moving towards a production build on the Prismara stack.

Availability

SovSec internal first; clients after go-live.

Build v0.5.0

Working today

Console, control plane, policy engine, key vault, audit, CLI, budgets, service principals and access keys, running against a simulated supplier. New in 0.5: an OpenTofu/Terraform provider, signed webhooks, daily usage reconciliation and Prismara Identity key support.

Next

Choose the Austrian infrastructure supplier, publish the provider to the OpenTofu registry, and add HSM sealing and Prismara Identity sign-in.

Availability

After the infrastructure supplier has been selected.

Build v0.1.0

Working today

Phase 1 works end to end in a virtual machine (UEFI and virtual TPM). On 22 October 2026 it installed, sealed the disk and ran the desktop on its first real laptop; fixes for networking, Wi-Fi and sealing speed are built.

Next

Verify the hardware fixes on that laptop, package Prismara Browser, and add measured boot.

Availability

SovSec internal devices first.

Build No build yet

Working today

Nothing is built. Edge Relay is a research item in the Prismara SOC technical specification; the SOC currently pseudonymises telemetry on arrival instead.

Next

No milestone scheduled; research continues alongside Prismara SOC.

Availability

Not yet scheduled.