Security

Safe enough to hand real work to.

Agents that act for you need to be safer than tools that only answer. Here is what Markhub does today, and how it works.

Sign-in

How it works

A passkey is a key pair. The private key stays on your device and the server keeps only the public key, so our servers never hold anything that could sign in with your passkey.

  • Two-step verification

    Use an authenticator app, plus one-time recovery codes.

  • Passkeys

    In your web browser. Face ID, Touch ID, Windows Hello, or a security key. The server stores only your public key.

  • Required for everyone

    Workspace admins can require two-step verification. Members without it are stopped at the door.

  • Asked again when it matters

    Deleting an account or issuing an API key asks for your code again, even inside a signed-in session.

  • Hashed session tokens

    Session tokens are stored as hashes, and a reused token revokes the whole family.

Your data

How it works

Each security log row carries the hash of the row before it. Editing or removing a row breaks the chain from that point on.

  • Export everything

    Download everything you own as one JSON file, any time.

  • Clear account deletion

    Delete your account and we tell you exactly what goes and what stays.

  • Security log

    For every workspace: who signed in, changed a role, issued a key, connected a tool. Append-only and chained with a hash, so a change would show. Export as CSV.

  • Retention you choose

    Admins choose how long the security log is kept: 1 to 7 years.

AI agents and the in-app browser

How it works

The agent's scripts live in a separate JavaScript world from the page's own code, so the page cannot see them or change what they report.

  • Isolated scripts

    The agent's browser scripts run in an isolated world. A web page cannot read or fake what the agent sees.

  • Sign-in, per site

    You choose, per site, whether the agent's browser stays signed in.

  • Sandboxed work mode

    The local agent's work mode runs inside a macOS sandbox. Without a sandbox it refuses to run work mode.

  • Passwords are for people

    The agent never types into password fields. Sign-in is always done by a person.

  • Touch to pause

    Touch the page and the agent pauses. You decide whether it continues.

Desktop app

  • Signed builds only

    The desktop app is signed, and it refuses to run modified or downgraded builds.

Operations

  • Rate limits

    On sign-in and on every API request, per IP.

  • Dependency scanning

    Dependencies are scanned in CI, and a critical vulnerability blocks the build.

  • Incident response

    We keep an incident response runbook and will notify affected customers.

Report a vulnerability or ask a question

Vulnerability reports
app.markhub.ai/.well-known/security.txt
Security questions
admin@markhub.ink