Security

Last updated: November 11, 2024

Our Commitment to Security

At Opactor, security is fundamental to everything we build. We understand that you're trusting us with your code, your data, and your applications. We take that responsibility seriously and implement industry-leading security practices to protect your information.

Infrastructure Security

Our infrastructure is built with security at its core:

  • End-to-end encryption for data in transit and at rest
  • Regular security audits and penetration testing
  • Automated vulnerability scanning and monitoring
  • Secure cloud infrastructure with redundancy and backup
  • DDoS protection and rate limiting

Code Security

Your code is yours. We implement strict measures to protect it:

  • Isolated execution environments for each project
  • No unauthorized access to your code or data
  • Automatic cleanup of temporary files and data
  • Secure API key management and encryption
  • Version control and audit logging

Access Control

We enforce strict access controls across our systems:

  • Multi-factor authentication for team members
  • Role-based access control (RBAC)
  • Principle of least privilege
  • Regular access reviews and audits
  • Secure authentication mechanisms

Open Source Security

Claudable and other open source projects benefit from community security:

  • Public code review and transparency
  • Dependency scanning and updates
  • Community-driven vulnerability reporting
  • Rapid response to security issues
  • Clear security disclosure process

Incident Response

We maintain a comprehensive incident response plan:

  • 24/7 monitoring and alerting
  • Dedicated security response team
  • Clear communication protocols
  • Post-incident analysis and improvements
  • Transparent disclosure of security incidents

Responsible Disclosure

We welcome security researchers and the community to help us maintain the highest security standards. If you discover a security vulnerability, please report it to us responsibly.

Email us at security@opactor.com with details of the vulnerability. We commit to:

  • Acknowledge your report within 24 hours
  • Provide regular updates on our progress
  • Credit you for the discovery (if desired)
  • Work with you to understand and resolve the issue

Contact Us

For general security questions, contact us at contact@opactor.com