Home/Security
Security

How we protect your code and your knowledge.

Dream Maker holds what your team knows about its own systems. We design for that from the start rather than adding controls afterward.

Isolation

Every project runs in its own space with its own keys. One project's agents have no path to another project's memory, and this is enforced by the architecture rather than by a permission setting that could be misconfigured.

The systems that handle accounts, plans and billing are separate from the systems that hold your memory. Billing can see that a space exists and what it costs to run. It cannot read anything inside it.

Credentials

Model provider keys are deposited write-only. We record a fingerprint so you can confirm which key is in use, hand the value to your project's process when it starts, and keep no readable copy. Nobody, including us, can read a deposited key back.

Encryption

  • All traffic is encrypted in transit with TLS 1.3.
  • Stored memory is encrypted at rest.
  • Access between internal services is authenticated per request and scoped to a single space.

Access and audit

Every action taken by an agent or a person is recorded with what it was based on. Audit records are exportable at any time. On the Enterprise plan you can stream them into your own logging system.

Self-hosting

If your policies require that code and knowledge never leave your infrastructure, Dream Maker runs entirely inside your own cloud. In that configuration we have no access to your data of any kind.

Reporting a vulnerability

Send details to [email protected]. We acknowledge reports within one business day and will keep you updated through to a fix. We do not pursue legal action against researchers who report in good faith and give us reasonable time to respond.

Questions from your security team

We are happy to work through review questionnaires and architecture reviews. Get in touch and we will connect you with an engineer.

Get started

Point it at a repository. It will tell you what you already meant.

Dream Maker reads your project and proposes the goals it finds there. You approve the direction, and your fleet is working within the hour.