Security, plainly.
Signed releases. No telemetry.
| Area | Topic | Detail |
|---|---|---|
| Servers | Outbound only | Each agent opens one TLS connection to the panel. No management port, no SSH keys. |
| Own key | The agent's key is made on the server and never leaves it. | |
| Few open ports | 80 and 443 for your apps. An optional firewall closes the rest. | |
| Secrets | Sealed in your browser | The panel stores only sealed values. Only the agent can open them. |
| Recovery key | Shown once. It also encrypts the panel's nightly backups. | |
| Access | Roles | Viewer, Developer and Admin. |
| Sign-in | Two-step codes from an authenticator app, or your SSO provider. | |
| Audit log | Every change, who made it and when, kept for a year. | |
| Not yet | Certifications | No SOC 2 report or third-party penetration test yet. |
| Your account | A stolen Admin account can't read secrets, but can deploy code. Turn on two-step. |
Found a problem? Write to security@useyawl.com