> ## Documentation Index
> Fetch the complete documentation index at: https://docs.asymptotelabs.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Enterprise Security Review

> Procurement and security review details for Beacon endpoint telemetry

## Review scope

Beacon is designed for endpoint-local collection of supported agent harness activity. During normal collection, supported runtimes send telemetry to a localhost OpenTelemetry receiver or invoke the local `beacon-hooks` adapter. Beacon normalizes those signals into endpoint events and writes them to a local JSONL log for local review or customer-controlled forwarding.

Normal hook execution has no Beacon-hosted dependency. The endpoint agent does not require a Beacon-hosted account, remote policy fetch, or external network connection to collect supported local runtime activity.

## Review package

<Columns cols={2}>
  <Card title="Data flow and threat model" icon="diagram-project" href="/security/data-flow-threat-model">
    Follow runtime signals from local collection through normalization, storage, dashboard inspection, and optional forwarding.
  </Card>

  <Card title="Data inventory" icon="table-list" href="/security/data-inventory">
    Review runtime coverage and the event fields Beacon can write when a source provides them.
  </Card>

  <Card title="Redaction and size limits" icon="filter" href="/security/retention-redaction">
    Review content handling, redaction, sanitization, truncation, and event-size limits.
  </Card>

  <Card title="Endpoint operations" icon="desktop" href="/security/endpoint-operations">
    Review paths, permissions, daemon behavior, network behavior, forwarding boundaries, and uninstall behavior.
  </Card>

  <Card title="Security policy" icon="shield-halved" href="/security/policy">
    Find the security contact, vulnerability disclosure guidance, and release verification policy.
  </Card>

  <Card title="Endpoint event schema" icon="code" href="/telemetry-schema/event-schema">
    Inspect the normalized JSONL contract used for Beacon endpoint events.
  </Card>
</Columns>

## Default posture

| Area | Default behavior |
| - | - |
| Collection | Local OpenTelemetry receivers on `127.0.0.1` or local hook adapter execution |
| Storage | Local `runtime.jsonl` on the endpoint |
| Hosted dependency | None required for normal endpoint collection |
| Forwarding | Optional and customer configured |
| Content handling | Retained local telemetry is subject to redaction, sanitization, truncation, and event-size limits |
| Removal | Endpoint uninstall removes managed service/config files, with explicit flags to keep logs or config |

## Related

<Columns cols={2}>
  <Card title="Open Source Architecture" icon="diagram-project" href="/architecture/architecture">
    See the endpoint collection, normalization, storage, and forwarding architecture.
  </Card>

  <Card title="Security & IT Rollout Guide" icon="building-shield" href="/security">
    Plan deployment, monitoring, and forwarding workflows.
  </Card>
</Columns>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.