OpenAI Anthropic llama.cpp vLLM OpenRouter Hermes OpenClaw OpenCode MimoCode JCode ZCode NVIDIA Salad Vast.ai RunPod Hostinger DigitalOcean Docker Kubernetes Ubuntu Kali NixOS Kodachi
Defense Information Systems

DOD IL4 — Security Controls

DOD Intermediate Level 4 (IL4) defines security requirements for Department of Defense information systems handling controlled unclassified information (CUI). FreeAI's hardened defaults align with IL4 controls.

IL4 Control Mapping

Security Controls Addressed

Key IL4 controls and how FreeAI implements them out of the box.

IA-2 — Identification & Authentication

Multi-Factor Auth Ready

JWT-based session auth, configurable session timeouts, and API key rotation. Dashboard supports integration with enterprise IdP via OIDC/SAML.

AC-2 — Account Management

Role-Based Access Control

Granular RBAC with operator/admin roles. Account provisioning/deprovisioning logged. Automatic session revocation on role change.

AC-3 — Access Enforcement

Least Privilege by Default

LAN-only bindings, UFW firewall restricts exposed ports to 22/8030/8050 only. Agent sandboxes prevent cross-process access.

AU-2 — Audit Events

Comprehensive Logging

JSONL audit trail for all agent actions, workflow runs, config changes, and security events. Log integrity via append-only design.

CM-3 — Configuration Change

Version-Controlled Config

All configuration stored in version-controlled files. Changes tracked in git. Rollback via config snapshot plugin with weekly retention.

SC-7 — Boundary Protection

Network Segmentation

Model servers bound to localhost. Router exposes only required ports. UFW rules enforce minimal attack surface. Optional Tor/DNSCrypt support.

Additional IL4 Coverage

All defense compliance frameworks

Explore NIST 800-53, FedRAMP, and CMMC requirements.

View All Frameworks