Skip to main content

Security model

Indexlume is a self-hosted control plane. Deployment owners are responsible for host security, TLS, network isolation, secrets, backup access, dependency updates, and account lifecycle.

Implemented controls include:

  • one-time owner bootstrap and session authentication;
  • API-enforced workspace roles;
  • encrypted PostgreSQL and Typesense connector configurations;
  • private/insecure destination policy checks;
  • read-only PostgreSQL session enforcement;
  • one-time public key display and keyed-hash storage;
  • bounded public search inputs, project isolation, rate limiting, and revocation;
  • audit records for project and access changes; and
  • dependency, secret, license, container-vulnerability, and SBOM CI gates.

Public search keys are designed as constrained, revocable read credentials. They are not equivalent to administrative secrets, but clients must still avoid committing them and must support rotation/revocation.

Report suspected vulnerabilities through GitHub private vulnerability reporting, not a public issue.