Security

Security documentation

TunnelCrib's security model starts with Device identity and ends with a narrowly scoped Tunnel to one Service. These pages document the mechanisms as implemented today, and clearly label anything that is still on the roadmap rather than shipped.

• Architecture
• Device identity
• Transport
• What the Relay can see
• Threat model
• Audit events
• Responsible disclosure

This section was last reviewed on 2026-09-09 against the current implementation. Corrections are welcome — [email protected].