Security

Your code and keys, kept under control

An AI agent that can run commands needs firm boundaries. These are the ones built into Altarus Nexus.

An isolated machine per project

Every project runs in its own lightweight virtual machine. Projects do not share a file system or processes with each other.

Encrypted secrets

Secrets are encrypted with per-organization keys protected by a cloud key management service. Revealing a value requires an admin and is recorded.

The agent never sees secret values

Nexus works with secret names only. Known values are removed from command output and files before anything reaches the AI model.

Approvals for risky actions

Choose how much the agent can do on its own. Destructive commands, database writes and new resources wait for your approval.

Network controls

Set each project to open internet, an allow-list of hosts, or no internet access, with an outbound request log.

Roles, SSO and audit log

Owner, admin, member and viewer roles, an audit log of sensitive actions, SAML single sign-on on Teams and Enterprise, and SCIM provisioning on Enterprise.

Questions about security?

Contact [email protected] for our security documentation or to report a concern. See also our Privacy Policy.

Your next idea starts here.

Open a project in your browser and let Nexus help you build it. Your first month is free.

$0 today · Cancel any time · Your code stays yours

Start your free month