Security

Security is how we work — not a feature we sell on top.

Defense in depth

Encryption in transit and at rest. Least-privilege access. Separate environments for development, staging, and production.

Access

Single sign-on, hardware-backed MFA, and audited just-in-time elevation for production. Credentials are never shared.

Code and supply chain

Reviewed pull requests, signed commits, pinned dependencies, automated vulnerability scanning, and reproducible builds where possible.

Monitoring

Centralized logs, runtime alerts, and quarterly reviews. We rehearse incident response so we don't learn it on the day.

Data handling

Customer data stays in the region you agreed to. Backups are encrypted, tested, and time-limited. We delete what we no longer need.

Responsible disclosure

Found a vulnerability? Email hello@byekxo.com. We respond within one business day, fix in good faith, and credit you if you'd like.