openFTTH
GitHub Download
FeaturesHow it worksDocsChangelogGitHub

security

Your network stays on your computer

openFTTH is a desktop app. Its helpers listen only on your own machine, and nothing is sent anywhere you didn’t choose.

Report a vulnerability SECURITY.md

How the app is built

  • The app, the crew harness and the engine run locally. The helpers listen on the loopback address only, behind a token made for each session.
  • The MCP link is off by default and stays on your machine.
  • AI account keys live in Windows Credential Manager, never in project or settings files.
  • Digging a new trench, routing outside ducts, rewinding a design and exporting for construction are refused without your approval.
  • No telemetry. Network fetches, such as OpenStreetMap, are explicit and named.

Reporting a vulnerability

Please report it privately through GitHub Security Advisories, not in a public issue. You’ll get an acknowledgement within 5 working days, a first assessment within 10, and a fix is aimed for within 30 days.

The full policy is in SECURITY.md.