Security
Configure access, protect credentials, and report vulnerabilities privately.
Updated · Public beta
Deployment baseline
Enable authentication, scope gateway keys to the workloads that need them, and configure request limits and budgets. Keep provider secrets in environment variables or the provider vault.
gateway:\n auth: true\n cache_scope: api_key\n log_payloads: falseBefore accepting remote traffic, configure TLS termination, restrict ingress, and review data retention and backups.
Deployment & hardening guideReport a vulnerability
Use GitHub private vulnerability reporting or email security@omniswitch.dev. Include the affected version, impact, and reproduction steps. Keep exploit details and credentials out of public issues.
Report privatelySupport & scope
OmniSwitch is in public beta. Version support, response targets, and disclosure procedures are maintained in the project security policy. Review API and guardrail limitations for your deployment.