Every page on this site

• Home

  Kunan Technology builds Merak, an SDP-based zero trust platform that removes exposed IPs and open ports from enterprise services, alongside penetration testing and red team engagements.

• About

  Kunan Technology focuses on zero trust network architecture and attack surface management, developing the Merak invisible network platform alongside red team and penetration testing services.

• Contact

  Discuss a Merak deployment assessment, request a product demo, or scope a red team or penetration testing engagement.

Kunan Technology covers both sides of enterprise defence: the Merak zero trust invisible network platform, and red team and penetration testing services that validate it.

• Merak invisible network platform

  A zero trust architecture that leaves enterprise services entirely invisible to unverified requests. Control and data planes are separated, and traffic runs encrypted point to point, never through a third-party server.

• Red team and penetration testing

  An internationally certified offensive team examines the gaps across systems, people and process using real attacker techniques. Findings are converted into a prioritised, executable remediation order.

Company announcements, events and awards from Kunan Technology.

• Kunan Technology relaunches its website

  The site now carries a dedicated Merak product page, a resources centre and a full English version, with every news item on its own shareable URL.

  Updated 2026-08-01

Authoritative external references on zero trust, SDP and security practice — from government agencies, standards bodies and non-profits — plus our engineering blog.

• Product documentation 1 products

  An index of Kunan Technology product documentation: the online manual and the downloadable operating manual for each product, currently the Merak zero trust network access platform.

• Engineering blog 10 articles

  Writing from the Kunan technical team on zero trust architecture, threat analysis, deployment practice and compliance.

• Whitepapers 9 references

  Foundational standards, frameworks and legislation on zero trust and SDP, published by government agencies and standards bodies.

• Case studies 10 references

  Public implementation guides, adversary behaviour knowledge bases and threat intelligence sources for benchmarking your own environment.

• Standards and specifications 9 references

  Protocol specifications, identity guidance and testing methodologies in their authoritative form, citable directly in engineering and audit work.

• Document downloads 1 documents

  Download the Kunan company profile, Merak datasheet, deployment checklist, security practices statement and NDA template.

Merak governs who may talk to which service, through which route. This manual is task-oriented: find the page you need by naming the job you are trying to do, rather than by guessing a menu label.

• Getting Started

  Signing in, activating an account, recovering a password, setting up MFA, and finding your way around the Console.

  Updated 2026-09-03

• Members

  Managing the people who consume access — their accounts, their devices, and what they are allowed to reach.

  Updated 2026-09-03

• Applications

  Publishing a service through Merak: where the traffic really goes, what name members address it by, and who may reach it.

  Updated 2026-09-03

• Organizations

  Grouping members and applications so access can be granted by team rather than one person at a time.

  Updated 2026-09-03

• Merak Nodes

  The edge routing nodes that actually carry traffic between members and services.

  Updated 2026-09-03

• Approvals

  Reviewing and deciding the requests that are waiting on a human.

  Updated 2026-09-03

• Logs

  Two read-only records: who did what in the system, and who reached what across the network.

  Updated 2026-09-03

• Administrators & Roles

  Who may operate the Console, and exactly how much of it they may operate.

  Updated 2026-09-03

• Bulk Operations

  Doing the same thing to hundreds of records: exporting a list, acting on a selection, and importing from a spreadsheet.

  Updated 2026-09-03

• My Account

  Your own profile, your password, your second factor, and how the Console looks and behaves for you.

  Updated 2026-09-03

• Agentless Portal

  The browser page a member uses to reach their services without installing anything.

  Updated 2026-09-03

• Permission Reference

  Every permission key, which page it opens, and which button it reveals.

  Updated 2026-09-03

• Status Reference

  Every status value in the product, what it means, and what it lets you do.

  Updated 2026-09-03

• Troubleshooting

  What went wrong, why, and what to do next.

  Updated 2026-09-03

• What SDP v3.0 Changed: SPA Is No Longer the Definition

  SDP v3.0 demotes single packet authorisation from definition to option. What the new guide actually changed, why SPA struggles on IoT and cloud functions, where the line between SDP and microsegmentation really falls, and what to do first.

  Updated 2026-09-14

• VPN vulnerabilities: why patching is always late

  What CISA’s exploited-vulnerability catalogue says about VPN vulnerabilities: how many in six years, why patching starts late, and what a patch cannot undo.

  Updated 2026-08-22

• Software-defined perimeter (SDP): how it works

  A software-defined perimeter puts the boundary at each resource: three roles, why single packet authorisation leaves scanners no reply, and what it misses.

  Updated 2026-08-13

• Attack surface inventory: what you expose publicly

  What an attack surface inventory answers: how one domain name becomes a target list, the six exposed assets most inventories miss, and what to do with each item you find.

  Updated 2026-08-12

• Ransomware attack chain: exposed service to encryption

  Every stage of the ransomware attack chain: how initial access happens, how it spreads, why backups do not stop extortion, and which link is cheapest to break.

  Updated 2026-08-12

• Choosing a VPN replacement and planning the migration

  What actually decides a VPN replacement: what to inventory, how to run the parallel period, which services move first, how to verify the old endpoint is gone.

  Updated 2026-08-12

• Red team versus penetration testing: how they differ

  How red team engagements and penetration testing differ in goal, scope, duration and deliverable, which one fits your situation, and where scoping goes wrong.

  Updated 2026-08-12

• What zero trust architecture actually is

  For the people who sign off the budget rather than build the systems: what zero trust solves, how it differs from what came before, what it is worth, and what to ask your IT team.

  Updated 2026-08-07

• How the Merak zero trust network works

  Plane separation, certificate identity, layered encryption, per-connection authorisation and the outbound dial — eight diagrams covering each mechanism of a zero trust network, and what each one costs you.

  Updated 2026-08-02

• Comparing traditional VPN, gateway-based ZTNA and SDP

  How the three remote access architectures differ across attack surface, data path, access granularity and deployment, with the limits of each.

  Updated 2026-08-01

• Merak Console operations manual PDF

  The full operating procedure — account activation, Merak Agent installation and device enrolment, member management, application and node deployment, and role and administrator permissions — with a troubleshooting appendix and a device status reference. Covers Merak Agent 1.4.2.

  Updated 2026-09-04

• Privacy Policy

  How Kunan Technology collects, uses and retains personal data submitted through this website, and the rights available to data subjects.

  Updated 2026-08-01

• Terms of Service

  Rules for using the Kunan Technology website, intellectual property notice and limitation of liability.

  Updated 2026-08-01

• Security Policy

  Kunan Technology’s security practices, data protection measures and responsible disclosure process.

  Updated 2026-08-01

Files read directly by search engines, feed readers and language models. Every one is regenerated at build time.

• News RSS feed

  Subscription feed for the news section, with a title, summary, date and permalink per item.

• XML sitemap

  The full URL list for search engines, including the alternate language version of every page.

• llms.txt

  A Markdown outline of the whole site, so a language model can take in its structure without crawling every page.

• robots.txt

  Crawler access rules and the sitemap location. This site is open to both search and AI retrieval crawlers.