Security Controls & Vulnerability Disclosure
We practice what we audit. AgentClad Security enforces restrictive security headers, zero-PII telemetry controls, and a transparent vulnerability disclosure program.
Vulnerability Disclosure (RFC 9116)
We welcome security research. Our vulnerability disclosure file is publicly published at RFC 9116 standard location.
Zero Telemetry & PII Filtering
Our web application features client-side and server-side payload sanitizers that inspect and strip all email addresses, API key patterns, and free-text form message content before analytics processing.
Security Headers & Infrastructure
All routes enforce strict Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), X-Frame-Options DENY, X-Content-Type-Options nosniff, and restrictive Referrer/Permissions policies.
Non-Endorsement Disclaimer
References to frameworks (OWASP, NIST, ISO, MITRE, Agent Protocol, MCP) or tooling do not constitute official endorsement, sponsorship, certification, or affiliation by those standards bodies or projects.
Security Contact Email
For security inquiries, vulnerability submissions, or PGP key requests: