Syntak Security suite

Security across the Syntak Suite

Every Syntak app is part of the security program.

This page covers how Daedalus Labs approaches security for the full suite, not just this website. Controls vary by product role, but the baseline is the same: least privilege, encrypted transport and storage, reviewable delivery, and clear disclosure.

Suite-wide security posture is described here. Product-specific runbooks and control evidence continue to mature with each application.

What this covers

These practices apply to Syntak Connect, Syntak Learning, Syntak GRC, Syntak Intel, Syntak Code Security, and the Syntak website at syntak.io. Each app has its own data plane and threat model, but they share the same operating expectations.

Suite baseline

  • TLS for public endpoints and encrypted storage for application data.
  • Least-privilege service roles and scoped human access.
  • Infrastructure defined as code for reviewable, repeatable deployments.
  • Authentication, authorization, and auditability matched to each product’s risk.
  • Logging and retention designed to support investigation without over-collecting.

How controls map across products

Syntak Connect brokers AI agent and tool access through security guardrails, policy checks, approval gates, and auditable allow/deny decisions.

Syntak Learning protects training and policy-acknowledgment records, account access, and completion evidence used by security and compliance teams.

Syntak GRC treats governance, risk, control, and evidence data as sensitive program records with ownership, access control, and operational continuity in mind.

Syntak Intel applies SSRF-aware source handling, role-based access, and careful treatment of research, feed, and integration data.

Syntak Code Security safeguards project configuration, scan results, SBOMs, findings, CI gate outcomes, and audit history used in DevSec workflows.

syntak.io protects content delivery and contact and access-request capture with private origins, edge TLS, an edge firewall, throttling, and short-lived encrypted lead records.

Secure delivery

Across the suite, we prefer managed cloud services, encrypted channels, and deployments that can be reviewed and repeated. Browser-facing surfaces use transport security and restrictive response policies where applicable.

Responsible disclosure

If you believe you have found a security issue in any Syntak application or on syntak.io, email security@syntak.io. Include enough detail to reproduce the issue and avoid accessing or changing other people’s data. We will acknowledge good-faith reports and coordinate next steps.