LinkTek manages software supply chain risk for LinkFixer Advanced through secure development practices, third-party component review, Software Composition Analysis, Static Application Security Testing, code review, and release-quality controls.
LinkFixer Advanced is a Windows desktop application installed and operated in the customer’s environment. It is not a LinkTek-hosted SaaS, web application, or server product. Customer files remain under the customer’s control and are not hosted, stored, or processed through LinkTek-controlled servers.
LinkFixer Advanced uses internally developed code and may use third-party libraries and underlying technologies as part of the product.
LinkTek assesses the libraries used by the application in cooperation with Information Security. This assessment is intended to help ensure that third-party code and libraries are obtained from reliable sources and reviewed for known vulnerabilities.
LinkTek takes a conservative approach to technology selection and software updates. Security, reliability, scalability, and usability are prioritized when evaluating technologies, patches, hotfixes, and third-party software components.
Software Composition Analysis (SCA) is included in LinkTek’s defined software development lifecycle for LinkFixer Advanced.
SCA is performed before a version of LinkFixer Advanced is released. It is used to identify and assess third-party software components and libraries included in the application, including potential known security vulnerabilities associated with those components.
When an SCA finding is identified, LinkTek evaluates whether the finding applies to the version and use of the component within LinkFixer Advanced. Where a vulnerability is applicable to LinkFixer Advanced, LinkTek addresses it before releasing the affected version of the software.
LinkTek performs Static Application Security Testing (SAST) as part of its standard software development lifecycle before releasing a version of LinkFixer Advanced.
SAST analyzes the application’s source code to help identify potential security weaknesses. It supports LinkTek’s multi-layer approach to vulnerability prevention and is used alongside other quality and security practices, including application code reviews, automated testing, peer review, manual testing, and independent quality checks.
LinkTek does not release software changes without appropriate review and testing.
Before a version of LinkFixer Advanced is released, relevant changes are subject to applicable development, security, testing, and quality-control activities. This includes SCA and SAST, as well as software design review, automated testing, manual testing, peer review, and independent quality checks.
If an applicable security vulnerability is identified during the release process, LinkTek fixes the vulnerability before releasing that version. Changes are incorporated into the product only after they have passed the applicable testing and review procedures without compromising product reliability.
LinkTek evaluates updates to underlying technologies, patches, and hotfixes through internal procedures before they are incorporated into LinkFixer Advanced. This approach helps ensure that changes are reviewed for security, reliability, and product impact before release.
LinkTek provides releases as necessary and strives to keep customers on the latest version of LinkFixer Advanced. Details about released updates are available in the “New Features and Fixes” chapter of the LinkFixer Advanced User’s Guide and through the “Check for Updates” tool within the application.
Security-testing information may be available upon request for individual customers, based on routine security scans performed during the standard software development lifecycle.