Orbit is built from the ground up with security as the foundational pillar. We understand that an agent needs deep access to be useful, which is why we employ best-in-class security practices.
All data at rest is encrypted using AES-256. All data in transit is encrypted using TLS 1.3. Your OAuth tokens are stored in a dedicated, isolated hardware security module (HSM) environment.
Orbit is SOC 2 Type II compliant. We undergo regular third-party penetration testing and maintain a public bug bounty program.