Security

Offsider is built so that your code, your checkouts and your keys stay on machines you own.

Where things run

Workers run on your machines. A Worker clones the repo, runs the agent and pushes the branch. Offsider hosts only the Coordinator, which records Jobs and serves the Console.
One Sandbox per Job. Every Job runs in its own container with a private Docker daemon. Containers, networks and volumes the Job starts live inside that Sandbox and are removed with it.
Nothing left behind. When a Job ends, its Sandbox, its checkout and its processes are removed from the Worker.

Your own API key. Claude Code runs on your own Anthropic API key, kept on your Worker and billed to you by Anthropic. Offsider never sees your model usage or resells it.
Short-lived, repo-scoped GitHub tokens. Offsider’s GitHub App issues a token for one repository for one Job. The agent pushes and opens the pull request with it, and it expires within the hour.
No long-lived secret in the agent’s environment. Git and the GitHub CLI reach credentials through a socket scoped to the Job, never through an environment variable.

The issue’s identifier, the progress the agent reports, the Job’s status and timings, and the pull request’s link. It does not store your repository.

Found a vulnerability? Contact us and say it is a security report; we reply within two working days.