Documentation
Security model
What Outpost protects, records, and deliberately refuses to do.
Owner access
The panel uses WebAuthn passkeys. Scoped API tokens are available for automation and can be revoked independently.
Server boundary
Outpost runs unprivileged behind Nginx. A small allowlisted root agent performs only fixed maintenance actions over a local Unix socket.
Logs and traffic
Operational events and aggregate connection traffic are retained. Browsing destinations, raw credentials, subscription tokens, and secret transport paths are redacted or never logged.