이 페이지는 현재 영어로만 제공됩니다. 브라우저의 자동 번역 기능을 이용하실 수 있습니다.
Security
A registry is only worth what its integrity is worth. Five layers, independently tested.
1 · Perimeter
Cloudflare WAF and DDoS mitigation in front of every region, per-key and per-IP rate limits, geo policies, TLS 1.3 only.
2 · Identity & access
Every agent request is signed (Ed25519); creators use mandatory 2FA; roles for creator, agent, territory admin, security, operator; zero-trust: every call is authorised.
3 · Data
Field-level encryption, keys in KMS/HSM, data partitioned by region so one region cannot expose another, PII masking in logs.
4 · Integrity & audit
Hash-chained, append-only ledger of every registry change and every acceptance of legal terms; signed records; versioning; backups in a neighbouring jurisdiction.
5 · Behaviour
Anomaly detection on agent traffic, honeypots that only unregistered agents hit, automatic quarantine, 24/7 human security team, incident response.
Where data lives
US (Virginia) · EU (Frankfurt — EU residents' data never leaves the EU) · Singapore · UAE. Operator: Yerevan, Armenia. Access by operator staff is role-limited and logged.
Assurance
External penetration test before launch and every 12 months; SOC 2 Type I targeted for year two, Type II after; cyber-insurance being put in place; public status page; breach notification to authorities within 72 hours of becoming aware (GDPR), to affected business customers within 48 hours, and per local law.
Report an unregistered or abusive agent
Send the AgentID (if any), the endpoint or platform where the agent was observed, timestamps and evidence to security@agentid-registry.com or via POST /v1/reports. Confirmed reports lead to quarantine and, for registered agents, suspension or revocation. Partners integrated via SDK block unregistered agents automatically.
Bug bounty
Responsible disclosure is rewarded from USD 200 to USD 10,000 depending on severity, under the Vulnerability Disclosure and Bug Bounty Terms. Do not test against production data of other creators; use the sandbox.