Security Policy

VIZOR, a product of VELTGAIST, follows a layered security model with technical and administrative controls across infrastructure and application surfaces.

Controls are reviewed periodically and adjusted based on threat posture and product changes.

Role-based permissions and least-privilege principles are used for internal and customer-facing access paths.

Sensitive operations are audited and protected by additional checks where applicable.

Transport encryption is enforced for client-server communication.

Stored secrets and sensitive values use managed encryption controls at rest.

Operational telemetry and audit data are used to detect unusual activity and support investigations.

Incident response includes containment, remediation, and post-incident review.

Security researchers can report vulnerabilities via the contact channel listed in `/.well-known/security.txt`.

Valid reports are triaged promptly and addressed based on severity and exploitability.