Security overview

AurantOS runs on modern cloud infrastructure with encrypted transport (TLS), tenant isolation in the application data model, and role-based access inside each organization. Authentication is handled through our identity provider with session controls appropriate for a workplace product.

Agent and API access uses scoped credentials that can be revoked. Administrative actions and sensitive changes are designed to leave an audit trail as those features ship. We apply least-privilege access for our own operations staff.

Report a vulnerability or security concern to security@tryaurantos.com. We take responsible disclosure seriously and will acknowledge reports promptly.