Security & Vulnerability Disclosure

1. Technical Security Architecture

Monolith engineers technical systems with a defense-in-depth posture:

• Strict Content Security Policy (CSP) with zero unsafe tunnels or open third-party proxies.
• Edge-level SSL/TLS 1.3 encryption across all client portals and administrative routing.
• Zero persistent client business training on public foundational AI models.
• Role-based access controls and encrypted secrets management across all cloud environments.

2. Vulnerability Disclosure Policy

We welcome security researchers and technical contributors to responsibly report any vulnerabilities found across getmonolith.in or associated customer deployments.

Please email vulnerability reports directly to: contact@getmonolith.in

Provide reproducible technical details, proof-of-concept steps, and allow a reasonable remediation window before public disclosure. We acknowledge valid disclosures promptly.

3. Acknowledgments

We actively recognize security contributors who help safeguard Monolith infrastructure and our client platforms. Verified technical researchers will be credited here.