Security

Found a security problem?

Write to hello@hesperan.com. Please give us time to fix it before you publish.

What to include

  • What you found and where: the page, the app or the server
  • How to see it happen, step by step
  • The app's or server's version, and your system
  • Whether you told anyone else

What it can be about

  • hesperan.com: the website, sign-in, downloads and your account
  • Hesperan Bots for Mac and Windows
  • The iPhone app
  • The server for Linux
  • Away from home through hesperan.com

How Hesperan Bots protects you.

Your keys
Model keys stay on your computer or server, encrypted; we never see them.
Your OK first
Buying, paying, sending and deleting ask you first; spending money is off until you allow it.
Stop everything
The menu bar or tray icon, or ⌘. or Ctrl+. in the app, stops every bot and routine at once.
Pages are data
What a bot reads on pages, in mails and files is marked as data, never as orders.
Away from home
Your phone reaches your bots through hesperan.com, encrypted end to end; we can't read it.
Bot computers
Each bot's computer is its own virtual machine: it sees only the folders it is given, never your local network.
AI agents
An AI agent you connect can talk to your bots, but never approves or changes anything.

No app can fully stop a page from trying to talk a bot into something. Your approvals limit the damage.

What we store · Questions · security.txt