Skip to content
ROOK

Security

A dedicated intake is not open yet.

Authentication is identity-aware. Authorization is enforced on the server, including object-level checks across households. Privileged access is explicit and auditable.

Do not send vulnerability reports through this product until a monitored contact is published on the verified canonical host. There is no security mailbox on this surface.

ROOK does not claim military-grade, untraceable, or zero-knowledge properties. Those words are marketing, not a control.

A zone or provider can be paused without taking the membership surface down.