Security & Vulnerability Disclosures
AnchorGit is designed with a zero-trust, local-first architecture. We welcome responsible security reports from researchers and developers.
Reporting Vulnerabilities
If you believe you have discovered a vulnerability or security flaw in the AnchorGit CLI or platform, please submit a report to security@anchorgit.com. We acknowledge all legitimate reports within 24 hours and issue updates as quickly as possible.
Initial acknowledgement within 24 hours.
Available upon request for sensitive reports.
Compliance & Security Standards
CC8.1 Change Management Compliance
AnchorGit provides mathematical proof of human agency and change management compliance without requiring third-party access to proprietary source code.
Local Workstation Isolation
All diff parsing and SHA-256 HMAC checksum derivations occur locally in workstation memory. Raw files, API keys, and code logic are never stored or transmitted.