Skip to content
Outirl
Sign in

Security

Your machines stay in charge.

Coordination is separate from execution. Every Host type has a named transport.

  • Execution Host

    Mac or Linux

    Files, tmux, PTYs, Git, agents and native operations.

  • Control plane

    Coordination

    Accounts, Host and session metadata, sync, grants and routing.

  • Approved client

    Scoped access

    A local replica and an identity limited to what you granted.

Transport

  • Paired Macs: end-to-end encrypted. The relay only forwards ciphertext.
  • Standalone macOS or Linux Host: authenticated TLS to the control plane, which can see relayed terminal traffic. Not end-to-end encrypted.

Secrets

  • Desktop credentials: macOS Keychain.
  • Browser peer keys: non-extractable Web Crypto keys in IndexedDB.
  • Provider credentials: server-side only, never returned by settings responses.

Your part

Secure Host accounts and disks, keep dependencies current, revoke lost devices, keep backups and review agent output. Outirl is not a backup service.

Report a vulnerability

Email contact@nocha.world with the component, impact, steps and minimum evidence. Don’t access data that isn’t yours or publish before a fix.