Instead of telling *to whom you did what*, tell **what** you did. So, instead of saying something like > I worked for the Indian Government Secret Branch to build a special > agent hour tracking application at http://topsecret.india.gov/agents > using Programming Language With A Known Security Hole and discontinued > Frontend Framework with another security hole v1.2.3 you could tell it in this kind of manner: > I worked on a confidential project that implements the backend using > Programming Language with a frontend using Frontend Framework. Since > it is under NDA, I am unable to share details. My tasks included > implementing the login system and authentication, and I also created a > HTML5 frontend with Bootstrap to create a modern and mobile-friendly > user interface.*" This way it is clear what you did and how you were involved, but no specifics are revealed that could be under NDA.