UniKioskSecurity
What it guards.
And what it does not.
Read the second half before you buy. It matters more than the first.
The shape of it
Nothing leaves the building.
There is no cloud to breach because there is no cloud.
No account
Nothing to sign up for, nothing to leak.
No telemetry
The app reports nothing to us. There is no endpoint to report to.
No CDN
The console ships its own assets. No third-party fonts or scripts.
Your content stays put
Media lives on the panel and on your own network storage.
LAN only
The console listens on your network. Nothing is exposed outward.
Config is a file
Export it, keep it, restore it. No vendor holds your setup.
Device
Locked without a reset.
The lockdown is enforced by window and key handling, so no device-owner provisioning, factory reset or MDM enrolment is needed.
- Status bar and navigation bar hidden, and re-asserted if they return.
- A PIN before the app drawer, the launcher picker or the console.
- Five corner taps to reach that PIN, so there is no visible way out.
- Wrong entries are counted, then locked out for several minutes.
- Launch on boot, and relaunch after a crash.
- Volume keys swallowed, screenshots blocked, both optional.
- An app allowlist for the drawer, empty by default.
Being window-level, it is not proof against someone with a keyboard, ADB and time. For that you want device-owner mode, which we do not use.
Console
The panel's own server.
Password per panel
Fourteen characters, generated on first run, readable only on the device.
Session cookie
Sessions end when the panel restarts.
Browser lockdown
Allow and block lists, no downloads, no pop-ups, no uploads.
The console is plain HTTP. Anyone who can see your network can see that traffic, including the password when you sign in. Keep panels on a trusted VLAN or a management network. HTTPS is on the roadmap and is not done.
Honesty
Not hardened yet.
If any of these is a requirement, wait for it or choose another vendor.
HTTPS on the consoleSoon
Plain HTTP today.
SSO and user rolesSoon
One admin account per panel.
Audit logSoon
No record of who changed what.
SOC 2No
No attestation. There is no service to attest.
Rate-limited sign-inSoon
The PIN pad locks out. The console does not.
Device-owner lockdownNo
Deliberate, so no factory reset is needed.
Reporting
Found something?
Write to security@unikiosk.io. Tell us what you did and what happened. We will answer.
Read the lockdown settings.
Every switch, and what it actually enforces.