Trust center

Penetration testing

Independent testing of the app and container.

Some commitments on this page are being put in place before the first paid release. Each item's status is marked.

An independent penetration test of the application and container image is planned after the first commercial release. When it is complete, an attestation letter will be published here and the full report will be available in the security pack under NDA.

Until then, you can review:

The software bill of materials and vulnerability gate on every release.
The untrusted input controls and their test cases.
The data flow: the app has no network path for your data, which limits what an attacker could reach.

Last updated 2026-10-01.