# metadata

**Kind:** Constant

**Source:** [`atloria-monorepo/apps/web/src/app/(marketing)/security/page.tsx`](https://github.com/sherkety/atloria/blob/main/atloria-monorepo/apps/web/src/app/(marketing)/security/page.tsx#L11)

/security — radical openness, not badge theater. Everything here is a control
you can read: server-injected credentials, an SSRF-guarded executor with its
own test suite, layered redaction burned into pixels, and self-host. We state
compliance HONESTLY: what's in place (architecture) vs what we haven't earned
yet (SOC 2 / ISO / pen test). No certifications claimed. No CORS claim made.
Design: light + colorful (matches /product/agent-actions), dark code panels.