Security

Security-first architecture

Top security score on ZeroLeaks with approvals, guardrails, sandbox isolation, and encrypted local storage. Includes 3200+ tests with 132+ security unit tests and 259+ WebSocket protocol tests.

tests
3200+
tests
security unit tests
132+
security unit tests
WebSocket protocol tests
259+
WebSocket protocol tests

Approval Workflows

Explicit consent required for destructive operations and spending actions.

Sandbox Isolation

macOS sandbox-exec, Docker isolation, or process-level sandboxing.

Local-First + BYOK

Operational state is local by default. Cloud routes receive requests and credentials only as required by the configured service.

Install CoWork OS