Skip to content
Rolodex
Menu

Feature

Security advisory

An AI review of what the public surface exposes and how webhooks are set up, which reports exposure and hygiene findings.

An org:admin runs the advisory. It sends only the public projection and webhook hosts, event lists and delivery counts to the model; personal fields and webhook secrets never leave the API.

Findings cover things like public directory service accounts, over-broad public membership and webhooks that only see dead deliveries. Without a model key configured, the advisory answers 503 and stays off.