Trust
Our security posture, stated precisely.
This page lists what is true today. Every line on it is meant to survive being checked.
Zero-trust access with the Weaver gate
Every request to an app passes the Weaver gate first. It checks who the person is and whether they may use this app before anything reaches it. Removing someone’s access takes effect at once.
No public ingress
Applications are reachable only over encrypted tunnels. There is no public endpoint to discover or probe.
Enterprise SSO on every application
Sign-in federates with your identity provider, so access follows your joiners-and-leavers process.
Per-application data isolation
Each application has its own database, authentication and storage, separated by network-policy boundaries.
AI usage audit trail and cost control
Every AI request is attributable to an application and a person. IT sets budgets, gets alerts on spend and chooses which AI models apps may use.
Full traceability of changes
Every change reaches production through a pull request with a running environment attached. You can see who or which AI agent made it, and when.
Central secret management
Credentials come from a central vault at deploy time and are never committed to your repository.
Dedicated European infrastructure
By default, applications and their data run on dedicated infrastructure located in Europe.
Production in your own cluster (BYOC)
Production apps can run in your own Kubernetes cluster, so their data stays in your environment. Weaver keeps running the platform that builds and manages them.