Trust Center
Every security claim on this page links to the code or documentation that implements it. No marketing abstractions — verifiable controls, open source.
Authentication and authorization are layered for human users, API keys, and agents.
Data access is constrained with request-scoped database context and encrypted secret storage.
Breeze applies defense-in-depth controls at transport, request, and policy layers.
Security-relevant activity is logged and operational procedures are documented.
Transparency Notes
Cloudflare API Shield-based mTLS can be enabled for agent certificate issuance, renewal, and quarantine workflows.
Breeze publishes SOC 2 Trust Services Criteria control alignment in documentation. This is a control mapping, not a public SOC 2 certification claim.
Implementation details, workflows, and security docs are publicly inspectable in the Breeze repository.
Follow coordinated disclosure and report vulnerabilities privately at security@lanternops.io. The published policy targets acknowledgment within 48 hours.