We are delivering an application which our customers can use on their network cluster. Now, is there any way that we can certify that the software is malware proof and is not going to spread malware on their network? That caused me to think:
- Executables sitting on a shared file server where only handful of the users can have access to it should be, in theory, "Safe". But how do we put an objective certificate to that statement?
- Also, we can scan our files and may make sure the files are OK. However, how do we convey this fact to our customers in a categorical manner?