FedM8 LLC
Maryland company that sells the tools. Privacy and Terms name it. This is not a SOC 2 report, and it does not change those pages.
JBNX LLC
Writes the product and runs the hosts. A services agreement with FedM8 LLC exists only as an outline. It is not signed.
Work board
In git written in the product files, and running or ready to apply.
Unsigned draft a paper exists. A person still has to sign it or run it.
Not done it has not happened.
On the public site
In git- Privacy names FedM8 LLC and JBNX LLC.
- Privacy says how incidents are handled, including 72 hours.
- Terms cover availability. FedM8 LLC has not published a numeric uptime percentage.
- A security.txt file says how to report a problem.
- This page runs the live checks below from your browser.
In the product files
In git- A worker checks the public site, sign-in, and the application worker. Two failures in a row send email to the support alert mailbox.
- A change goes live only after Approve in chat, or the word prod-it. The live copy follows the approved branch.
- Public pages ship security headers. Public HTML has no inline scripts.
- Database checks cover operators, admin second-factor, audit, a privacy inventory, and a nightly re-proof.
- Session replay is not loaded.
Unsigned drafts
Unsigned draft- Incident playbook.
- Tabletop script.
- Restore test agenda.
- Recovery plan. A rewind of the database to an earlier time is not confirmed.
- Vendor list. Their reports are still to obtain and read.
- Access review dated 25 Aug 2026.
- Account ownership list. The CEO still decides each row.
- Secret rotation calendar. The CEO still rotates.
- Credentials inventory.
- Workstation attestation template.
- JBNX LLC services agreement outline. Not a contract.
Not done
Not done- An auditor has not been hired.
- There is no signed SOC 2 report.
- The JBNX LLC services agreement is not signed.
- The tabletop has not been run.
- The restore test has not been run.
- Vendor reports have not been obtained.
- A numeric uptime percent has not been published.
- This product is not FedRAMP authorized. It is not a CMMC assessment.
Live checks from this browser
These run in your browser right now. A failed row is this check, not a published SLA. The company site often cannot read the application worker (that host only answers the tools site). If a row says it could not read the URL, the worker may still be watching that host. This page does not send a sign-in key; an answer of 401 still means the sign-in host is up.
Last check: waiting…
If you need the legal wording
Open Privacy or Terms. If something looks down, use the support form. The tools host shows the same board with the workspace chrome.