Required MFA
Password and authenticator sign-in, PKCE and exact callbacks. Development local-password login is disabled.
TRUST & SECURITY
Accountable access.
Explicit scope.
Explore the controls configured in the hosted pilot and the validation still needed for a wider release.
OBSERVED CONTROLS
Controls configured
in the hosted pilot.
These describe observed configuration, not a third-party certification.
Scoped data access
Named operators, tenant/organisation role boundaries and forced row-level database security.
Verified transport
Public HTTPS and endpoint TLS 1.3. Agent identity uses installation certificates, separate from public server trust.
Operational records
Group changes and access decisions enter the audit workflow. Independent external anchoring remains a release gate.
Protected recovery
Encrypted, authenticated backups with an isolated database-and-key restore check. Full replacement-host recovery is still pending.
Visible availability
Provider deployment and endpoint acceptance remain distinct from control-plane health.
RELEASE READINESS
A clear evaluation boundary.
The product is not advertised as ISO 27001, SOC 2, FIPS or maritime-class certified. Independent assessment, release signing, load/soak testing and complete remote/SOC acceptance are pending.
Hosted pilot
Workspace & identity
HTTPS console, password + authenticator sign-in, scoped roles, groups and audit records.
Evaluation builds
Desktop & endpoint workflows
Windows and Mac operator downloads. Remote session and production endpoint acceptance are still in progress.
Provider rollout pending
Security monitoring
Lab telemetry and findings. Production SOC infrastructure and monitoring acceptance remain pending.
RESPONSIBLE REPORTING
Report a security concern.
Contact the project owner with a brief description. Do not send exploit secrets or private customer data through the public form.
Build your next endpoint workspace.
Start with a conversation about your fleet, your workflows, and a controlled pilot.