Security policy

Security is at the core of Tengan. The platform is designed to remove the attack surface of traditional BMC management tools.

A long, bright aisle between two rows of white server cabinets under a line of ceiling lights

How the fleet stays sealed.

What protects every session, from the first login to the last line of the audit log.

  • AES-256 encryption

    All data is encrypted in transit with TLS 1.3 and at rest with AES-256-GCM.

  • Credential vault

    Encrypted storage with automatic rotation. Operators never see a raw password.

  • Session recording

    Every keystroke is captured, giving a full audit trail for compliance.

  • Zero trust

    Every connection is authenticated. There is no implicit trust anywhere.

  • Audit logs

    Immutable logs track all access, commands and changes.

  • Vulnerability disclosure

    Report security issues to security@epathra.com. We respond within 24 hours.
A tall open cabinet of compute blades, each with a column of blue status lights
Dense blue, grey, green, red and yellow patch cables plugged into a switch
A glass-walled server room built inside a stone chapel under a red ceiling

Reporting a vulnerability.

We welcome reports from security researchers. Email us the details of any vulnerability and we respond within 24 hours.

security@epathra.com