Placeholder text
This page is laid out and reachable, but the wording is not final. Replace the body of
content/security.md with the agreed text.Reporting a vulnerability
If you believe you have found a security issue in Cogito², write to us at the address below. Tell us what you found and how to reproduce it, and give us a reasonable period to respond before disclosing it publicly.
How the product is built
Two commitments hold throughout, and both are architectural rather than aspirational:
- No plaintext secrets at rest. Every secret a node holds is encrypted in an in-process store; no key and no secret value is ever written in the clear.
- Scoped permissions and a readable trail. An agent acts with the permissions it was given, approval gates sit in front of what warrants them, and what was done is recoverable afterwards.
This site
The site is static, anonymous, and has no path into the control plane. It holds no session, sets no cookie, and stores nothing you submit beyond delivering it as an email.
Questions about this page: hello@cogito2.ai