LinkTek is committed to identifying, preventing, and addressing security vulnerabilities in LinkFixer Advanced throughout the software development lifecycle.
LinkFixer Advanced is a Windows desktop application installed and operated in the customer’s environment. It is not a LinkTek-hosted SaaS, web application, or server product. Customer files and related data remain in the customer’s environment and under the customer’s control. LinkTek does not host, store, or process customer files through servers owned or controlled by LinkTek.
Security is considered throughout the design, development, testing, and release of LinkFixer Advanced. LinkTek follows a secure software development lifecycle that incorporates relevant elements from multiple security resources, including OWASP. LinkTek also keeps up with the annual CWE Top 25 list as part of its efforts to help prevent common software weaknesses.
The development lifecycle includes activities such as requirements analysis, security review, software design, static code analysis, automated testing, peer review, manual testing, independent quality checks, and deployment. Depending on the scope and nature of a change, these activities may occur at multiple stages of a project.
LinkTek considers software quality and security to be integral to development, rather than activities performed only at the end of a release cycle.
LinkTek uses Static Application Security Testing (SAST) as part of the standard software development lifecycle for LinkFixer Advanced. SAST is used to help identify potential security weaknesses in the application’s source code and to validate the effectiveness of LinkTek’s vulnerability-prevention efforts.
LinkTek also performs application code reviews and uses automated code scanners to help identify code flaws and potential vulnerabilities. These practices are complemented by automated testing, manual testing, peer review, and independent quality checks.
LinkTek maintains systems that monitor for vulnerabilities and scan for potential threats. Potential findings are reviewed through internal procedures, and corrective actions require the appropriate internal review and approval.
When a security vulnerability applicable to LinkFixer Advanced is identified through security testing, code review, software component review, or other development activities, LinkTek addresses the issue before releasing the affected version of the software.
Changes are integrated into the product only after they have completed the applicable development, testing, review, and quality-control activities. A version is released only when the relevant changes have passed those checks without compromising product reliability.
LinkTek evaluates patches, hotfixes, and related technology updates through its internal development process before incorporating them into the product. This process includes software design and development, ongoing peer review, automated and manual testing, and static analysis.
Because LinkFixer Advanced is installed in the customer’s environment, customers remain responsible for the security of their own infrastructure, including endpoints, networks, databases, file storage, access controls, and connected systems.
LinkTek provides product updates as needed. Information about released software updates is available in the “New Features and Fixes” chapter of the LinkFixer Advanced User’s Guide and through the “Check for Updates” tool within LinkFixer Advanced.