Security
Designed to survive
your security review.
DeployTitan was built from the first commit with enterprise security in mind. Your traffic stays in your infrastructure. Your secrets never leave your environment.
Principles
How we build for security.
These are engineering decisions baked into the architecture, not compliance checkboxes or marketing claims.
Your traffic never touches our infrastructure
The Titan Controller runs in your VPC, cluster, or Cloud Run service. All routing decisions are executed locally. DeployTitan's API stores policy and audit data, never your traffic.
Secrets never leave your environment
DeployTitan stores deployment metadata and policy config only. Environment variables, secrets, and credentials stay in your secret manager: Vault, AWS Secrets Manager, or GCP Secret Manager.
Encrypted in transit and at rest
All API communication uses TLS 1.3. Data at rest is encrypted with AES-256. The controller authenticates with short-lived signed tokens rotated every 15 minutes.
Immutable audit log
Every deployment, rollback, policy change, and user action is written to an append-only audit log. Enterprise customers can export to S3 or GCS on their own retention schedule.
Least-privilege access model
Roles are scoped to read-only, deploy-only, admin, or auditor. Every API token is scoped to a single organisation. SCIM provisioning and SSO/SAML available on Enterprise.
Distroless controller, minimal attack surface
The controller container has no shell, no package manager, no unnecessary OS utilities. Static binary, ~70MB, built from scratch. Runs as non-root with a read-only filesystem.
Data residency
Your traffic path is yours alone.
Most deployment tools sit in your traffic path. They become a single point of failure and a potential data exfiltration vector. DeployTitan inverts this model.
The controller polls our API for deployment intent, then executes that intent using your platform's native routing primitives: nginx weights, ALB target group percentages, Cloudflare traffic rules. We never see your requests.
Evaluate DeployTitan
Ready to run your own security review?
Start a free trial and deploy the controller into your own infrastructure. Review the source, run your pen test, inspect every byte that leaves your environment.
Vulnerability disclosure
Found a security issue?
We take security reports seriously. Email security@deploytitan.com with details. We commit to acknowledging reports within 24 hours and providing a resolution timeline within 72 hours.
Report a vulnerability