Security

Last updated: April 11, 2026

Security is enforced by transport signing, policy gating, and token lifecycle controls across all public API and dashboard paths.

Core Controls

  • JWT/session validation and role-scoped authorization for dashboard features.
  • Signed request handling for service interconnects.
  • Rate limits and anomaly detection on elevated request patterns.

Reporting

Report suspected abuse or vulnerability concerns at security@velariq.ai and include timeline, headers, and relevant request IDs.

You can also review controls in the developer docs at NRSIP protocol.