Security

Isolation

• Every session runs in a Pod cloned fresh from a golden image. Pods are never reused across customers and are destroyed ten minutes after the last session ends.
• Each Mac mini runs two Pods. Pods on the same machine are separate virtual machines with their own disks and memory.
• Enterprise customers can have a dedicated pool of Macs that no other tenant touches.

Network

• Pods make outbound connections only: api.anthropic.com or api.openai.com, your git host, and the package registries a build needs.
• No inbound ports. No SSH or screen sharing for customers or for Macswarm staff into a running customer Pod.
• Enterprise plans can add a private network to a self-hosted git server.

Secrets and keys

• Environment keys and webhooks identify your organization to Macswarm. They are stored encrypted and never written into Pod images.
• Secrets your builds need are injected at session start and exist only in that Pod’s memory and session-scoped files. They are gone with the Pod.
• You bring your own model access. Macswarm never sees or stores your Anthropic or OpenAI credentials beyond the session they are used in, and never resells tokens.

Code and data

• Your repository is cloned into the Pod for the session and destroyed with it. Macswarm keeps no copy.
• Commits are attributed to the developer who started the session.
• Logs and screenshots the agent produces are shown in the dashboard and retained for 30 days, then deleted. Team and Enterprise can set a shorter retention.
• Region is chosen per environment: EU (Netherlands) or US. Pods, logs and screenshots stay in the chosen region.

What we log

Session start and end, which developer started it, Pod-hours used, and the events the agent reports. We do not inspect the content of your repositories. The Team and Enterprise audit log records who connected environments, changed secrets or started sessions.

Apple licensing

Macswarm provides continuous integration and developer services on Apple hardware that we own and operate, the same model that established macOS CI providers use. Enterprise customers can have dedicated Macs on monthly terms.

Reporting a vulnerability

Write to info@macswarm.com. The address and expiry are published in security.txt. We acknowledge reports within two working days.