Vi har arbetat sedan 2009 med IT-säkerhet till kunder med skyddsvärd information.

Craton – an IT system for security-classified information

Control creates security

Craton™ is a modern, complete IT platform developed for organisations that need to manage security-sensitive and security-classified information. With Craton, you get a secure, reliable and modern IT environment that supports the digitalisation of security-sensitive operations, with full traceability of everything that happens.

A modern IT platform for security-sensitive operations

What is Craton, and what is it used for?

Craton is a modern IT platform designed specifically for security-sensitive operations. It meets both the Swedish Security Service’s regulations on protective security and the Swedish Armed Forces’ requirements for IT security capabilities up to and including the security classification HEMLIG (SECRET). The platform’s capabilities are also adapted for use in an international context, in line with NATO and EU Secret requirements.

Craton-based systems are delivered and installed at the customer’s site. Once in place, this ensures that the customer has an IT environment for managing classified information, through a complete and proven solution for digitalising security-sensitive operations, backed by an assurance guarantee.

Because the platform is built on the principle of Infrastructure as Code, traceability, stability and control are ensured throughout the entire lifecycle.

How Craton works

Craton is delivered as a complete, physical IT system that is built and installed in secure facilities at Basalt, and then delivered to and deployed at the customer’s site. The platform consists of three main components:

1. Craton Secure Platform

The secure infrastructure foundation that meets the requirements for security-sensitive operations.

2. Craton Secure Workplace

A user-friendly and secure work environment for working with classified, document-based information. Craton Secure Workplace includes the components required to share and collaborate on security-classified information, such as document management, email, chat and an office suite.

3. Business applications

Customer-specific applications that can be integrated as part of the system delivery and managed by Basalt.

Want to know more?

An IT environment for managing security-sensitive and security-classified information

Who is Craton for?

Craton is for organisations covered by the Protective Security Act, or that handle information requiring protection. The solution has been developed for organisations with high demands on security, resilience and regulatory compliance, and is used by, for example:

Government agencies
Municipalities and regions
State-owned and private companies within total defence
Energy, telecom and other critical infrastructure
Companies that provide services to organisations covered by the Protective Security Act
Organisations engaged in international cooperation (e.g. NATO/EU)

A security and quality guarantee for development and management

Assurance and regulatory compliance

Assurance is essential for organisations that work with information requiring protection. Craton therefore includes a built-in assurance guarantee — all development and management follow Craton’s established assurance method.

Craton is designed to meet:

The Swedish Security Service’s requirements (PMFS 2022:1)
The Swedish Armed Forces’ requirements (KSF 3.1 High)
Requirements in national and international protective security contexts

The method has been proven through systems approved for operational use by the Swedish Security Service, the Swedish Armed Forces and international partners.

Basalt takes responsibility:

Management and lifecycle

Craton includes Basalt’s management service, which ensures that the system is always kept modern, up to date and protected. As a customer, you are only responsible for on-site operations — we take care of the rest.

We are responsible for:

Regular updates and patches
Testing of all components in a reference system
Secure distribution to your environments
Monitoring of standards, threats and components
Managing changes and end-of-life for included software
Continuous modernisation of the platform

Fully automated and traceable administration

Documentation and system in sync

Because Craton bases much of its documentation on the system’s configuration as code, which in turn controls the automated processes that deploy the system, existing and future releases are kept in sync with the documentation. This is because the documentation is version-controlled in sync with the delivered systems.

This means that the system always has up-to-date documentation, since it automatically reflects the parameters and software that the current version of the system is actually based on.

Craton’s documentation is generated automatically and version-controlled in the same way as the system itself. This means:

Always up-to-date documentation
Accurate configuration descriptions
Clear traceability over time
Reduced administrative workload

This provides both peace of mind and time savings during audits and inspections.

Want to hear more about how Craton works?

Defence in depth

Why Craton?

Basalt works according to a transparent and robust IT security programme based on an “assume breach” mindset.

We always assume a technically skilled and motivated attacker, which raises the bar for security in everything we do.

Craton is built on:

Security by design
Protecting against threats, even from those you trust
The assumption of constant attacks
Reuse and standardisation
Automation and traceability
Control at every stage of the lifecycle

This results in a secure and robust platform, even for the most demanding organisations.

Craton makes it possible for the security department and the responsible security protection manager to trust that the IT environment is secure, to feel full assurance, and to rely on it.

What Craton helps organisations achieve

Craton provides a complete, modern and secure IT platform that:

Creates a safe and secure digital work environment for handling classified information correctly and efficiently.
Enables the digitalisation of operations that would otherwise depend on manual or outdated working methods.
Meets requirements from supervisory authorities and creates favourable conditions for a positive consultation outcome or accreditation.
Reduces your risk exposure by ensuring that both technology and processes support robust protective security.
Provides a cohesive system delivery in which the platform, work environment and business applications work seamlessly together.
Relieves your organisation, as Basalt takes responsibility for management, updates, patching and monitoring of external developments.
Ensures automated, version-controlled documentation, which saves time and reduces errors.
Keeps the entire IT environment modern and up to date, without requiring you to carry out major internal projects or technology changes.
Provides a resilient and future-proof foundation for business development, new functionality and changing requirements.
Creates confidence throughout the entire lifecycle — from on-site installation to long-term management and further development.
Makes it possible for the security department or the responsible security protection manager to trust that the IT environment is secure, to feel full assurance, and to rely on it.

The market's most secure IT platform

Craton

Craton meets the highest quality and security requirements on the market, and even satisfies military requirements for classified (SECRET-level) information — without complicating operations. Read more in our product sheet.

Download our product sheet

Get tips and inspiration from Basalt
Subscribe to our newsletter
E-mail

Invalid field

Jag vill få relevant information från Basalt AB till min inkorg. Basalt AB ska inte dela eller sälja min personliga information. Läs vår integritetspolicy här
Jag kan när som helst avsluta prenumerationen.

Required field

Stay one step ahead.

Let Basalt be responsible for your operational protection.
Contact us and we will guide you right!