Trust & Proof

Every BitBeam action produces evidence. Every change is audited. Every capability is tenant-isolated. BitBeam is built on a security-first architecture where trust is not assumed — it is proven.

Tenant Isolation

Every BitBeam customer gets a dedicated tenant. Your data, credentials, AI workers, and generated content are isolated from other customers. No cross-tenant access is possible — enforced at the database, API, and infrastructure level.

Evidence-Backed

Every scan, every AI action, every automated change produces evidence. Screenshots, HTML snapshots, HTTP responses, and timing data are captured and stored. You can verify what happened, when, and why — without trusting anyone’s word.

RBAC Governance

Role-Based Access Control governs every capability. Viewers can see, developers can build, operators can execute, tenant admins can configure, platform owners can manage. Every role change is audited.

Vault-Secured Credentials

All credentials — Stripe keys, API tokens, social media accounts — are stored in HashiCorp Vault, never in WordPress options or source code. AppRole authentication with short-lived tokens. Fail-closed if Vault is unavailable.

Audit Trail

Every MCP tool call is audited and ingested into Brain. Caller identity, roles, tenant, tool name, arguments (sanitized), status, duration, and IP are logged. Audit events are searchable and exportable.

Security Scanning

Continuous security scanning for WordPress sites. Vulnerability detection, threat scanning, and security hardening. BitBeam Security Shield identifies issues before attackers do.

Security Architecture

Edge LayerOpenShift router with TLS termination, rate limiting, and WAF rules

Application LayerWordPress with RBAC, MCP audit, and tenant isolation filters

Identity LayerKeycloak OIDC with MFA, social login, and tenant-scoped claims

Secrets LayerHashiCorp Vault with AppRole auth, KV v2, and short-lived tokens

AI LayerBrain knowledge base with vector RAG, governed cognition, and audit ingestion

Worker LayerTenant-scoped browser workers with CDP isolation and evidence capture

Data LayerPostgreSQL with row-level security, Qdrant for vector search

Privacy & Compliance

GDPR — Data minimization, right to access, right to erasure. See our Privacy Policy.
Data residency — All data stored in EU (OpenShift cluster, Frankfurt region).
No training on your data — Your data is never used to train AI models for other tenants.
14-day money-back — Not happy? Get a refund within 14 days. See our Refund Policy.

Experience evidence-backed security

Run a free website scan and see BitBeam’s evidence pipeline in action.

Scan my website →