Security and vulnerability reporting

Controls

The service uses encrypted credential storage, HTTPS, passkeys and email recovery options, scoped access, organization permissions and activity records. Authorization can be based on exact-action approval, a client policy or a standing grant as explained in Terms. BEON decrypts credentials to execute authorized operations; this is not a zero-knowledge vault. No claim of SOC 2 or ISO certification is made.

Report a problem

Email info@beonlimited.com with the affected feature, approximate time and a sanitized description. Never include live tokens, recovery codes, private keys or unrelated personal data. Stop testing if it exposes another person’s data or could disrupt the service. We will assess reports, investigate, and provide legally required notifications. This reporting policy does not authorize access to third-party systems.

Updated October 6, 2026. Version 2026-10-13.1.