Skip to content

Security at G6Solver

Last Updated: 15 March 2026

1. Data Protection

Data at Rest

Server-side databases support SQLCipher (AES-256) encryption with PBKDF2/HKDF-derived keys, and stored access tokens are encrypted with Fernet (AES-128-CBC with HMAC-SHA256). Account and billing data are encrypted at rest, and database backups are encrypted.

Where Processing Happens

G6’s components run on G6Solver’s servers. Your own agent — Claude Code, a script, an integration — stays on your machine and reaches G6 over the network, so only what you explicitly pass to a tool leaves your machine; your source files are not uploaded. Tool inputs are processed server-side, and some of what you send is retained — see the FAQ and the Privacy Policy.

Data in Transit

All communications occur over HTTPS/TLS to prevent interception or tampering.

2. Authentication & Access Control

  • All passwords are hashed and salted before storage.
  • Optional two-factor authentication (TOTP).
  • Session-based authentication with secure cookies.

3. Infrastructure Security

Hosted MCP Server

Server infrastructure hosted on Google Cloud (us-central1, United States) with Cloudflare for DDoS mitigation, firewalling, and traffic filtering. Network security includes intrusion detection, prevention systems, and automated rate limiting.

4. Application Security

Secure coding practices include input validation, SQL injection prevention, and strict code/data separation. We conduct code audits and automated vulnerability scanning. A formal penetration testing program is planned.

The Computational Safety Framework (CSF) is in active development. Known enforcement gaps are tracked and addressed in each release.

5. Incident Response

We aim to acknowledge reported vulnerabilities within 24 hours. Security updates are deployed as soon as practical after validation.

6. User Responsibilities

Use strong, unique passwords. Keep your system updated. Avoid use on unsecured or shared devices.

7. Responsible Disclosure

We welcome responsible disclosure. Email [email protected]. Do not exploit vulnerabilities or access other users' data. Bug bounty rewards may be payable at our discretion.

8. Compliance

G6Solver is building security controls informed by SOC 2 principles, GDPR, and Australian Privacy Act 1988 requirements.

9. Contact

For security concerns: [email protected]