Security
Built for the most sensitive data you have: how your systems run
Security is part of the architecture, not an afterthought.
Strict tenant isolation
Every query is scoped to your organization and verified by automated isolation tests. Another company can never see your servers, logs or incidents.
A locked-down agent
Outbound HTTPS only. No remote shell, no remote command execution, no open ports. Unique, revocable credentials per server and replay protection on every request.
Signed releases
Agent binaries ship with checksums and signatures that the installer verifies before anything runs.
Encrypted secrets
API keys and database passwords are encrypted at rest and never shown in full again once saved.
SSRF-hardened checks
External checks resolve and validate every target, block internal and metadata addresses, and re-check every redirect.
Role-based access & audit
Owner, Admin, Developer and Viewer roles enforced on the server, with an audit log of sensitive actions.