Company
Security
Security is built into our AI SDLC, not added at the end.
How we build securely
- Secrets live in a secrets manager, never in code; every commit is scanned and a hit blocks the merge.
- Tenancy is resolved from verified identity and tested so one tenant can never read another’s data.
- Dependencies are scanned for known vulnerabilities and licence issues on every change.
- AI agents get least privilege: scoped tools, no production access by default, every action logged.
- Harness checks — tests, static analysis and security scans — gate every change before review.
Reporting a vulnerability
Email [security@neomonarch.com] with a description and steps to reproduce. We will acknowledge within [two business days] and keep you updated until it is resolved. Please give us reasonable time to fix an issue before disclosing it.