Security

Monitor agent risk without creating a new blind spot for your organization.

Data Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Encryption keys are managed with strict access controls and regular rotation.

Access Controls

Role-based access control with principle of least privilege. All internal access is authenticated, authorized, and audit-logged. Production access requires multi-party approval.

Infrastructure

Hosted on Cloudflare's global edge network with built-in DDoS protection, Web Application Firewall, and automatic failover. Infrastructure is defined as code and continuously monitored.

Authentication

Powered by WorkOS for enterprise-grade authentication. Supports SSO, SAML, and multi-factor authentication. Session management with automatic expiration and revocation.

Compliance

Our data processing practices align with PIPEDA, GDPR, and SOC 2 requirements. We maintain a comprehensive Data Processing Agreement and transparent subprocessor list.

Responsible Disclosure

We welcome security researchers to report vulnerabilities responsibly. Contact security@overlay.run with details and we will respond within 48 hours.