Security / Trust Center

Kaptan is designed for enterprise multi-tenant operations with SSO, RBAC, audit logging, and encrypted secrets at rest.

Controls

• TLS for browser and API sessions
• Tenant isolation across data and Kubernetes access paths
• SSO via enterprise IdPs (Entra ID, Okta, and others)
• Session lifetime and idle timeout policies surfaced at sign-in
• Human approval for AI-proposed changes with policy enforcement

SOC 2

We maintain SOC 2–aligned controls for security, availability, and confidentiality. Request the latest report through your account team or security@kaptan.dev.

Vulnerability disclosure

Report security issues privately to security@kaptan.dev. Do not open public issues that include exploit details.