SECURITY · MEASURED 14 OCTOBER 2026
Network Behaviour Statement
Every network port Ovvos Wasel 1.0 opens, and every address it contacts. The second list is empty. The method is included so an accreditation team can repeat it.
- PROFILE
- On-premise, default
- SCOPE
- Startup, idle and a full four-language meeting
- OUTBOUND CONNECTIONS
- 0
1. Ports the product opens
| PORT | BOUND TO | PROCESS | REACHABLE FROM |
|---|---|---|---|
| 8760/TCP | all interfaces | Ovvos Wasel server — participant page, audio/caption stream, room display, console | The room network |
| 8761/TCP | 127.0.0.1 | Audio capture service | This PC only |
| ephemeral | 127.0.0.1 | Translation engine | This PC only |
| ephemeral | 127.0.0.1 | Neural voice service | This PC only |
The installer, run as Administrator, creates one inbound Windows Firewall rule for 8760 — allowed on Private and Domain networks, never on Public ones.
2. Addresses the product contacts
No licence server, no telemetry, no update check, no model download, no cloud service.
To show its own address in the QR code, the server asks Windows which interface it would use, with a UDP socket "connected" to 198.51.100.1 — a reserved documentation address (RFC 5737) that is never routed. A UDP connect sends no packet. The server also resolves the PC's own hostname. Neither leaves the PC.
3. How it was measured
WITNESS 1
The operating system's TCP table
Every 150–200 ms, every TCP connection owned by an Ovvos Wasel process — including the WebView2 processes hosting its window — recorded if its remote address was not this PC.
WITNESS 2
Audit hooks inside every process
A handler for every name lookup and connection attempt, however brief — so nothing falls between polls. Tested first against a known lookup.
4. Results
| SCENARIO | WITNESS 1 · TCP | WITNESS 2 · AUDIT HOOKS |
|---|---|---|
| Cold start + idle, 110 s | No connections outside the PC | No lookups or connections beyond the interface probe |
| Full meeting, 230 s — 12 sentences, 48 deliveries, 4 languages | No connections | Nothing beyond the interface probe |
| Neural voice: Arabic, English, German | — | No lookups or connections |
| Application window | No connections | — |
5. Scope and limits
- Default on-premise profile. The optional cloud profile sends audio and text to the chosen provider by design. It is off by default.
- The operating system is out of scope. Windows Update, Defender and time sync follow your own IT policy. For an air-gapped room, isolate the PC and its access point from any route outward.
- Repeatability. The measurement scripts can be supplied to accreditation teams. The simplest independent check: a span-port capture or host firewall log during an acceptance meeting.