Security Policy

Our commitment to keeping your data safe

Reporting Vulnerabilities

We take security vulnerabilities seriously. If you discover a security issue, please report it responsibly:

โš ๏ธ Important

Do NOT create public GitHub issues for security vulnerabilities. Email us at security@aether-os.dev instead.

Security Features

๐Ÿ”’ Encryption

AES-256-GCM encryption for sensitive data at rest

๐Ÿ”‘ Authentication

OAuth2/OIDC support with JWT tokens and refresh

๐Ÿ›ก๏ธ CORS & CSP

Configurable cross-origin policies and content security

๐Ÿ“ฆ Sandboxing

Plugin isolation in sandboxed iframes

๐Ÿงน Sanitization

Input sanitization for all user content

๐Ÿ” Auditing

Comprehensive action logging and audit trails

Scope

We consider the following as in-scope: