PromptLedger

Security

Our actual posture, stated plainly. SaaS-appropriate, no theater.

  • Per-workspace API keys (stored SHA-256-hashed) gate the log and dashboard endpoints; a key only ever sees its own workspace, and with no keys configured the endpoints refuse requests (fail closed).
  • JSON bodies are size-capped (1 MB default); invalid input is rejected with 400s, never processed.
  • Token counts are validated non-negative; hard caps are enforced before logging.
  • Slack webhook URLs and API keys are environment-configured; structured logs never include them.
  • The proxy binds localhost by default; TLS is terminated at your reverse proxy.
  • Report a vulnerability: email us and we'll respond within 2 business days.
What we don't claim: we don't claim certifications we don't hold, we don't claim "military-grade" anything, and we don't claim a system can't fail — we claim the specific controls above and a 2-business-day response on reports.