Architecture
Local-first architecture
The desktop app runs on your machine. Conversations, files, workspaces, and vault contents live on your device, not in a multi-tenant cloud.
Loopback-only UI
The admin and chat UIs bind to 127.0.0.1. Nothing listens on the public internet unless you deliberately expose it.
Encrypted vault
Credentials, API keys, and tokens are stored in a vault encrypted with XChaCha20-Poly1305 and a key derived by Argon2id from your passphrase.
Secret scrubbing
Before any prompt reaches a language-model provider, a scrubber strips detected secrets and obvious PII from both inputs and outputs.
Hardened shell execution
When your agent runs a shell command, a validator blocks dangerous patterns (destructive flags, pipe-to-shell installs, etc.) before the command reaches your OS.
Three-layer runaway guards
Call budgets, idempotency guards, and loop detection stop an agent from burning through your machine, your wallet, or a remote API.
Full audit trail
Every run, every step, every tool call is logged locally in a queryable journal so you can reconstruct exactly what your agent did and why.
Encryption in transit
All network calls from the desktop app use TLS 1.2+. We verify certificates and do not ship pinned bypasses.
How we run
our own systems.
Found a vulnerability?
Tell us first.
If you believe you've found a security issue in Brainmox or the CloudAid infrastructure, email hello@brainmox.com with a description, reproduction steps, and your preferred contact. Please give us a reasonable window to fix the issue before public disclosure. We will credit researchers who want credit, and we respond to every report.