Your machines, your keys, your data.
What protects a machine and what protects your information, in plain terms.
How Vantage protects the machines.
Pinned certificates, both ways
An agent generates its certificate once and serves TLS. The app pins that certificate when you pair, so nothing can pretend to be that machine later. The agent pins the app's key in return. An agent answers health and pairing to anyone, and nothing else to a client it has not paired with.
One-time pairing codes
A pairing code is generated on the machine by someone with a shell there (
sudo vantage pair). It works once and runs out after 15 minutes. A wrong or expired code says so and names the command to get a new one. Compare the fingerprint it prints with the one the app shows.Signed agent builds
An update pushed from the app is checked against the publisher key the machine's owner pinned. The machine runs the new build once to prove it works, replaces itself only then, and keeps the one it replaced. A build that cannot run never takes over. The private half of the key stays on the machine that cuts builds. An agent installed without the key refuses updates.
Team keys and removal
An invite is shown once and runs out in 72 hours. Both sides compare a fingerprint and the owner accepts. Removing a person is refused at the gateway at once and each agent confirms. A machine that is off stays listed as still reachable until it answers, and the app retries every 10 minutes.
Keys stay put
The app's identity key lives in the macOS keychain, or in the desktop keyring on Linux, where it never falls back to a file. On a Mac with a Secure Enclave you can move it there: it cannot be exported, and it does not follow the Mac to a new one, so machines are added again.
Secrets masked at the source
The agent masks secrets in logs before a line leaves the machine, and Ask Claude scrubs again before you see the text. Cloud credentials sit in the keychain and are never shown again.
Least privilege on a Mac
The agent runs as its own unprivileged user. The log helper starts as root, drops to the owner's account, serves only the agent and reads only files on its allow-list.
No telemetry, no cookies
Vantage sends no usage data. This site sets no cookies, runs no analytics and loads no third-party scripts.
The data you keep.
What you keep
The app's data is on your computer. Logs and metrics are on your observability host, and the page for that server shows how long they are kept. The audit is on the machine and in the app.
Where it goes
Nowhere, unless you switch on a channel. The list of what each channel sends is on How it works.
Delete it
Forget a machine to remove it from the app. Uninstall removes the agent and its secrets file from a machine. Because the data is on machines you own, you can also delete the app's data folder or the observability server's data yourself.
Ask us
For anything about this website or to ask for a deletion, write to [email protected]. See the privacy page.
Questions about security?
Read the docs, or contact us and we will answer in writing.