Security
Current security controls in the public product surface.
pressor.ai operates around OIDC-based enterprise identity policy, secure session cookies, encryption, audit logging, and repeatable operational checks.
Citable summary
pressor.ai operates around OIDC-based enterprise identity policy, secure session cookies, encryption, audit logging, and repeatable operational checks.
Authentication and access control
- Browser sessions use HttpOnly, Secure, SameSite authentication cookies.
- The enterprise package supports OIDC-based SSO / OIDC policy.
- Role-based access control is applied at workspace and organization scope.
Data protection
- Transport protection is enforced over TLS/HTTPS.
- Mailbox credentials, OAuth tokens, and webhook secrets are treated as protected secrets.
- Session revocation, share revocation, and abuse throttling are part of operating controls.
Audit and validation
- Key administrative actions and sensitive operational events are covered by audit logging.
- Runtime security configuration and closeout checks are part of release validation.
- A public status page, SCIM, and BYOK are outside the first package scope today.