Security
Empyrean LLC, doing business as Empyrean Consulting, builds software with AI-assisted engineering.
Practices
- Code scanning: Core platform code gets static analysis and dependency vulnerability checks on every change and every week.
- Remediation: The role that finds a security issue files it. A separate role makes the fix as a tracked change.
- AI agents: Each agent has a defined role and permissions. A person approves irreversible external actions.
- Credentials: Credentials are stored in a managed vault, not in source code.
- Data: Each integration has a privacy policy that states the data it uses.
Report a vulnerability
Security contact: Jacob Jones. Include what you found, where you found it, and the steps to reproduce it. Do not include passwords, access tokens, patient information, or other people's data.
jacob.jones@empyreanconsulting.com