Security
Security controls built into each product
What each product does to protect your systems and data, as implemented in its code today.
Self-hosted
Every product runs inside your infrastructure; your data does not have to leave it.
Air-gapped installs
Air-gapped installs and offline licences are documented for ClusterEye and CertAutoPilot.
Access control
Role-based access control in every product, with JWT; LDAP in ClusterEye and MergePilot; 2FA in ClusterEye and Elchi.
Audit trails
Audit trails in every product; syslog/SIEM forwarding in Elchi and CertAutoPilot.
Secrets at rest
Secrets encrypted at rest: ClusterEye connection details, CertAutoPilot envelope encryption with KEK rotation, Elchi ACME and licence data.
Signed updates
Signed agent updates in ClusterEye.
Need security details for a review?
Ask us about a specific product; we'll answer from its code and documentation.