Our Security Principles
Transparency builds trust. Here's exactly how we protect your API keys.
💡
Zero-Knowledge Architecture
A security model where the service provider has no access to user data. In Cirklu's case, we never see, store, or transmit your actual API keys in plain text.
Related: End-to-end Encryption, Client-side Security, Privacy by Design
💡
AES-256 Encryption
Advanced Encryption Standard with 256-bit keys. Military-grade encryption used by governments and banks. Provides 2^256 possible key combinations, making it computationally infeasible to break.
Related: Symmetric Encryption, Block Cipher, Cryptographic Security
🔐
Zero Knowledge Architecture
What We Never See:
- ❌Your actual API keys
- ❌Unencrypted data in transit
- ❌Your browsing patterns
- ❌Which services you use
How We Ensure It:
- ✅All encryption happens locally
- ✅No key material leaves your device
- ✅Open source for auditing
- ✅Minimal permissions requested
🔒
Encryption Standard
Algorithm: AES-256-GCM
Key Derivation: PBKDF2 (100,000 iterations)
Random Generation: Crypto.getRandomValues()
Implementation: Web Crypto API
💾
Data Storage
Location: Your device only
Method: Chrome's encrypted storage
Sync: Encrypted across your devices
Servers: Zero persistent storage
Security Audit
~ security checklist
$ cirklu --security-audit
🔐 Encryption: AES-256-GCM ........................... ✅ PASS
🔑 Key Management: Local-only ......................... ✅ PASS
🌐 Network: Zero key transmission .................... ✅ PASS
📱 Permissions: Minimal required ....................... ✅ PASS
🛡️ Manifest V3: Latest security standard .............. ✅ PASS
📖 Open Source: Planned post-validation ................ 📅 ROADMAP
🚫 Telemetry: No usage tracking ....................... ✅ PASS
Security Score: 9/10 ✨ EXCELLENT (Open Source: In Progress)
🗺️
Transparency Roadmap
We believe security through obscurity is not security at all. Here's our methodical approach to full transparency and validation.
🔓
Live Hack Challenge
Community validation
✅ ACTIVE NOW
→
🛡️
Independent Audit
Professional security review
📅 UPCOMING
→
📖
Core Module Open-Sourcing
Full code transparency
⏳ PLANNED
→
🏆
SOC2 Certification
Enterprise compliance
🎯 GOAL
Security Questions?
We welcome security researchers and encourage responsible disclosure.
📧security@cirklu.com