Trust Center

Website test results

Encrypted connections

Qualys SSL Labs

Last testedNov 1, 2026
GradeA
View report

Security headers

Security Headers by Snyk

Last testedNov 1, 2026
GradeA
View report

Certifications and independent testing

We’ll publish results and report details here as each one is completed.

Omnesly application testing

Independent test results for the desktop and web app.

Not yet completed

Independent penetration test

A hands-on security assessment by an outside firm.

Not yet completed

SOC 2

An independent audit of our security controls.

Not yet completed

ISO/IEC 27001

Certification of our information security management.

Not yet completed

How we protect you

Your API keys

Provider keys are encrypted with AES-256-GCM and stored only on the device or server that runs Omnesly for you. They’re never written to our cloud database, returned to your browser after saving, or logged.

Your connection

Data sent between the app and our servers is encrypted in transit using TLS, and the website tells browsers to always connect over HTTPS.

Your account

Protect your account with an authenticator app. Sign-up and sign-in forms are also checked by Cloudflare Turnstile to help keep automated abuse out.

Your data

Row-level security limits each signed-in user to their own data and data explicitly shared with them. You can download your data or delete your account from your account page.

Your approval

Proposed code changes, commands, tool calls, and connected-app actions wait for your approval before they run.

Found a security issue?

Please email us with the details so we can look into it. For how we handle your information, see our privacy policy.