VedaCODE security controls
WAF, secret stripping, tenancy and audit logging.
- Perimeter WAF with Standard, Strict and Under Attack profiles and auto-escalating IP rate limits and bans.
- Secret-stripping guardrails redact API keys, credentials and PII from prompts and logs; builds that introduce hard-coded secrets are rejected.
- Multi-tenancy and RBAC: six tenant roles and members-only projects.
- SSO: OpenID Connect with PKCE and signature verification.
- Sealed credentials: AES-GCM for integrations.
- Transport: TLS 1.2+ with ECDHE ciphers.
- Audit: L3/L7 request audit logging.