Why this environment matters
Security for government employee secure workstations starts with the system's role: it supports everyday access to departmental records, email, portals and line-of-business applications. A key concern is that phishing, malicious documents and credential theft can expose sensitive citizen information or establish long-lived persistence. NØNOS offers a potential architecture based on signed capsules, explicit capabilities and strong isolation.
The security challenge
The practical concern is that phishing, malicious documents and credential theft can expose sensitive citizen information or establish long-lived persistence. Public-sector systems hold authoritative records and powers that affect identity, liberty, property, emergency response and national security. Endpoint compromise can therefore create consequences far beyond data loss. The attack surface may include remote support, software updates, removable media, third-party libraries, public input or misused operator credentials. The security design therefore needs containment as well as prevention.
How the capsule model could help
The proposed deployment pattern is to run risky content, privileged applications and departmental services in separate signed capsules with disposable user sessions. NØNOS would use attestation for privileged actions and controlled removable media as the trust foundation, then apply disposable trusted sessions and signed application allow-lists around higher-risk functions. Logs or proofs could record which approved capsule performed a privileged action without retaining unnecessary user data.
Deployment requirements
Government deployment would require formal accreditation, identity and records integration, accessibility testing, procurement assurance and controls appropriate to the information classification and public function.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Central government departments purchasing managed employee device fleets
- Local authorities procuring secure desktop services for public servants
- Government IT contractors integrating applications and supporting endpoint rollouts
Industry examples: HM Revenue & Customs, Department for Work and Pensions. These are research prospects, not represented as NONOS customers, partners or endorsers.