Governance
Security Vault
How the site is built today, and what the full security page will cover once the product is built.
Last updated: October 10, 2026
Muninn is still being built. You can already sign in, but the product behind the sign-in does not exist yet. This page covers the site as it is today and will be replaced by the full page before the product opens.
The site today
You sign in with a one-time link sent to your email address, or with your GitHub or Google account, so Muninn has no password of yours. A link works once and expires after 5 minutes.
An account holds your email address. After a sign-in with GitHub or Google it also holds what they pass on: your name or username, the address of your profile picture, the identifier of your account there and the tokens issued for the sign-in.
The site itself is a set of static files. It loads no third-party scripts, and its fonts and icons are served from the site itself. The one exception is the map on the page of an application with a location, which is a Google Maps frame when the site has a key for it.
What is planned
How your data is encrypted, where it is hosted and how it is backed up are not decided yet.
Before the product opens
This page will become the full security page. It will say how to report a vulnerability, how sign-in and sessions work, how your data is encrypted and who can access it, which AI provider reads your postings, and how you are told about an incident.