Security

SoluTerminal runs coding agents on your computer, so it's built to keep you in charge of what they can do and of who can reach your computer. Here's what's on by default, what you can turn on, and the limits.

On by default

Agents can't approve themselves. Agents using SoluTerminal's tools can't approve their own requests, answer permission prompts, or turn on auto-approve. Only you can. To allow it for a while, use Settings › Devices › Agent permissions (for 1 hour, 8 hours, or until you turn it off).
Web pages stay in their box. Pages you open in a browser pane in the desktop app can't use SoluTerminal's own controls.
Sign-in tokens aren't stored readable. Our service keeps only a hash of each computer's sign-in token, not the token itself.
Updates are checked before they install. Each update is signed, and the app checks the signature before it installs anything.
Your Claude Code and Codex settings change only if you say yes. On first run, SoluTerminal asks. If you say no, nothing is added. Turning it off in Settings, or uninstalling on Windows, removes what it added and keeps a backup of each changed file.

You can turn on (with a free account)

Only devices I approve. On your computer, open Settings › Devices › Remote devices and choose "Only devices I approve". A new browser or phone then shows a code: approve it on your computer only if the codes match, then confirm the match on the new browser too. After that, every request must come from a device you approved, so a stolen login or a compromised relay can't run anything on your computer, and alerts and reminders reach our service without session details.
End-to-end encryption (beta). In a browser you've approved on a computer, turn on "Encrypt this browser's connection end to end (beta)". The relay in between then sees only when and how much data passes, not your session. If the encrypted connection can't be made, the browser stops rather than falling back to an unencrypted one. Not available on phones yet.

What's sent for checks

Approve with caution and Always approve can ask an AI check before approving. Approve with caution checks each permission prompt (at most the last 30 lines of that pane); Always approve checks only prompts SoluTerminal doesn't already recognise. Either way, only the permission being checked is sent to our approval-checking provider, never more than 4 KB, and nothing at all if it looks like it contains a secret. Off, the default, sends nothing. Details: Privacy.

The limits, honestly

Programs running as you. SoluTerminal can tell its own agents apart from you, but not a program that runs as your own user and deliberately hides what it is. That's true of any developer tool on your computer. Run code you don't trust in a separate user account, a container or a sandbox.
Encryption is opt-in and per device. Without it, the relay can read the sessions you open remotely. With it, the relay can still delay or block a connection.
In a web browser, the app's code comes from our service each time you open it. Encryption keeps the relay out of your session, but a compromised service could serve a page that misuses that browser's approval. The desktop app, in its normal local mode, loads its interface from your own computer, so it doesn't have this limit.
The Windows installer isn't code-signed yet, so Windows shows "Windows protected your PC". You can check the download against the checksum on the download page.
No independent audit yet.

Report a security issue

Email security@soluterminal.com with your version (Settings › About), what you did and what happened. Please don't share details publicly until we've had a chance to fix it. We'll acknowledge every report, but we can't promise a response time yet.

What leaves your computer and why: Privacy. How to use these settings: Help.