Security at Prefactor

Agent-first auth infrastructure, built for trust from day one.

Our Security Principles

Technical Practices

Agent authentication as code— versioned and built for your developer workflow. Define, manage, test and track user flows as code, from dev to production.

OAuth 2.1 + PKCE

OAuth 2.1 + PKCE

Token rotation & expiry

Token rotation & expiry

TLS encryption

TLS encryption

TLS encryption Secrets never stored in plaintext

TLS encryption Secrets never stored in plaintext

CI/CD pipeline integrity

CI/CD pipeline integrity

We’re building toward SOC 2 and ISO 27001 compliance. Security is foundational, not bolted on

We’re building toward SOC 2 and ISO 27001 compliance. Security is foundational, not bolted on