The strict security policy to protect SciWard app from hackers and Trojans.
The following security measures will be taken as soon as financing for SciWard and other the science-funding initiative projects is approved:
- SciWard (Node.js version), SciWard (after deploying its ICP blockchain version, but before giving away control over it to a DAO), Join Proxy, and organization’s finances will be administered inside separate VMs in a world-leading secure OS with an encrypted filesystem.
- The office will be held in a security-protected building.
- The control over SciWard and other relevant software is planned to be given away to a DAO.
- Relevant passwords will be randomly generated.
- A developer security platform will be used.
- Because card processing is outsourced, our PCI DSS scope may be limited. We still retain the merchant responsibilities applicable to our integration and payment-provider relationship. On the donation pages we explicitly warn users not to use our site for card processing but to use secure payment systems like GPay or Link.
- The SciWard software is released open-source.
- Secret reports of security vulnerabilities are available.
Help Turn SciWard’s Beta into Evidence
SciWard remains experimental. The next proposed milestone is a five-month public adversarial test, with $1,000 planned for distribution to eligible funding recipients. Donations support the work required to run and evaluate that test.
Fund the public test → Test proposal → Independent review →
AI-generated evaluations can contain factual errors or biases. Public testing, auditability, and external criticism remain part of the project.
5 thoughts on “Security Measures for SciWard and Related Projects”