⚠ Security

Security at Oh My GDaaS

A chaos tool must itself be rock solid. Here's how we protect you.

Architecture

Outbound-only agent

The agent opens no inbound ports. It connects out to our control plane over mTLS.

Scoped credentials

Cloud roles are least-privilege and revocable. We never ask for admin.

Encryption

TLS in transit, encryption at rest for everything we store.

Minimal data

We store run metadata, timelines and reports not your application data.

Compliance

SOC 2 is on our roadmap. A DPA and sub-processor list are available on request at security@omgdaas.com.

Responsible disclosure

Found a vulnerability? Email security@omgdaas.com. We acknowledge reports quickly, keep you updated, and won't take legal action against good-faith research.