Security
Last updated: September 21, 2026
ClevAgent provides guidance and safeguards for agent activity inside its workspace. These protections have limits and cannot catch every risk.
Your workspace and data
ClevAgent runs local checks in memory on your device without saving the inspected content. Account services and some agent activity are processed online. See our Privacy Policy for information on data collection, external AI processing, service providers and deletion.
Account protection
Public clevagent.io connections use HTTPS. Passwords are stored as hashes, and password resets use email links. You can also sign in with Google.
Protected session cookies and request checks help prevent unauthorized account actions.
Payment protection
Stripe processes payments. ClevAgent does not store your card numbers.
Report a vulnerability
Report security issues to [email protected] with the affected feature and steps to reproduce the issue. We will respond within 2 business days. Do not include passwords, access keys or private workspace content.