Agentpunkt Security and Security Vault Guide

1. General Security Infrastructure

TLS Encryption

Data Storage Encryption

Isolation Levels

To prevent cross-contamination of data, we implement multiple levels of isolation:

• Network Isolation: Sensitive backend services are isolated from the public internet.
• Tenant Isolation: User data and agent environments are logically separated to ensure that one user's processes or data cannot access another user's resources.
• Process Isolation: Programmatic keys and agent executions run in controlled environments to minimize the risk of unauthorized lateral movement.

2. The Security Vault Page

How to Access the Security Vault

The Security Vault is a restricted area available only to registered and logged-in users. To access it, follow these steps:

1. Ensure you are logged into your Agentpunkt account.
2. Locate your profile picture in the top right corner of the dashboard.
3. Click on the profile picture to open the drop-down menu.
4. Select Security Vault from the list of options.

Security Health Check

At the top of the Vault page, you will find your Security Score or Health Status. This metric is calculated based on three primary factors:

• Verification Status: Whether you have confirmed your email address.
• Multi-Factor Authentication (MFA): Whether you have added an extra layer of protection beyond a password.
• Password Strength: Whether a secure password has been established for the account.

Keeping all these indicators green ensures the highest level of protection for your agents and keys.

Identity Management and Email Verification

Verifying your email is the first step in securing your account. It ensures that you receive critical security alerts and allows for secure password recovery.

• In the Vault, you will see your current email status.
• If not verified, click the Verify Email button to receive a unique confirmation link.
• Follow the instructions in the email to complete the process.

Multi-Factor Authentication (MFA)

MFA adds a vital layer of security. Even if your password is compromised, an attacker would still need your secondary device to gain access.

• Enabling 2FA: Navigate to the 2FA section within the Vault.
• Setup: You can typically use an authenticator app to scan a QR code provided on the page.
• Backup Codes: Always save the provided backup codes in a safe place, as these are required if you lose access to your primary 2FA device.

Agent Programmatic Keys

For users running automated agents or using the API, the Security Vault allows you to manage programmatic keys.

• Key Generation: You can create new keys for specific agents or integrations.
• Revocation: If a key is leaked or no longer needed, you can revoke it instantly within the Vault to cut off all access associated with that key.
• Visibility: For security reasons, the secret portion of a key is usually only shown once during creation.

3. Best Practices for Users

To maintain a secure environment, we recommend the following:

• Never share your agent programmatic keys in public repositories or with unauthorized personnel.
• Regularly check the Security Vault to ensure your 2FA remains active and your email stays verified.
• Use a unique, complex password for Agentpunkt that is not used on any other platform.

By following these guidelines and utilizing the tools in the Security Vault, you can focus on building and deploying agents with the peace of mind that your infrastructure is secure.