Trust
Security practices for a security product
What we do today, what is in progress, and how to reach us about a security issue. We do not claim certifications we have not been assessed for.
| Area | Practice | Status |
|---|---|---|
| Website | HTTPS only, strict security headers and content security policy, no third-party trackers or advertising cookies | In place |
| Release integrity | SHA-256 checksums and signature verification steps for every agent download | With first public release |
| Software supply chain | Pinned dependencies, automated vulnerability and secret scanning, software bill of materials per release | In progress |
| Product access control | Role-based access, MFA and audit trail in Orbit AI Ops | Product feature |
| Data location | Orbit runs on your premises or in your own cloud account | Product design |
| Privacy | Data minimisation and consent for marketing contact, aligned with India’s DPDP Act | Policy under legal review |
| Certifications | None claimed at this time | — |
Found a vulnerability? Read the disclosure policy. Machine-readable contact: security.txt.