Security

Last updated: May 2026

Security is built into everything we ship at El Elyon Labs — not bolted on after. This page describes our security posture and how to report vulnerabilities.

Our Approach

Human approval gates on all automated workflows
Audit trails on every action taken by AI agents
Least-privilege access — agents operate with only the permissions required for the task
Data encryption in transit (TLS 1.2+) and at rest
No customer data used for model training

Responsible Disclosure

If you discover a security vulnerability in our website or products, please report it to us privately before public disclosure. We commit to:

Acknowledging your report within 2 business days
Investigating and resolving confirmed vulnerabilities promptly
Keeping you informed of our progress

To report a vulnerability: hello@elelyonlabs.com

Scope

In-scope: elelyonlabs.com and any subdomains. Out-of-scope: denial of service attacks, social engineering, and physical attacks.

Contact

Security inquiries: hello@elelyonlabs.com