Security for the systems that run agent work.
Wallfacer connects agents to the code, credentials, tools, and services their assigned work requires. We protect that access with scoped identities, isolated environments, encryption, and retained activity records.
Security program
Wallfacer runs on AWS. Our application and infrastructure controls include least-privilege access, encryption in transit and at rest, and continuous monitoring. We review customer security requirements as part of putting a process into production.
SOC 2 Type I
Wallfacer has a SOC 2 Type I report. Prescient Assurance LLC performed the examination, which covers the description of our system and the design of its controls as of August 18, 2026.
The report covers the Security category of the AICPA Trust Services Criteria. Availability, Confidentiality, Processing Integrity, and Privacy are outside its scope.
The report is restricted to customers, prospective customers, partners, and their practitioners. To request a copy, contact us. We share it under a mutual NDA.
We also work directly with prospective customers on security reviews and questionnaires.
Responsible disclosure
If you discover a vulnerability or security issue in Wallfacer, please disclose it responsibly.
Please send bug reports and security disclosures to [email protected].
We commit to:
- Acknowledging your report promptly
- Investigating the issue in good faith
- Keeping you informed of our progress
We ask that you avoid exploiting vulnerabilities, accessing data that isn't yours, or disrupting services if you're conducting security research.
Contact
For security-related questions or to submit a security questionnaire, contact us at [email protected].