Security overview

Evidence, not remote control.

SystemLens is designed as a bounded diagnostic evidence plane. Version 1 has no generic command path and no machine-changing tools.

Least privilege

A fixed read-only collector allowlist. No shell, arbitrary files, process control, service control, or system mutation.

Account isolation

OAuth identity, per-request ownership checks, account-bound snapshots, and independently revocable device credentials.

Bounded transport

An outbound TLS/WebSocket connection, strict schemas, size caps, timeouts, concurrency bounds, and local sanitization.

Minimized storage

Request telemetry in memory; user-created snapshots encrypted with AES-256-GCM and automatically expired.

Transport and credentials

The companion opens no inbound port. Its per-device credential is stored for the current Windows user with Windows DPAPI. The backend stores a one-way verifier, enforces ownership on every device-scoped request, and rejects revoked credentials.

Reporting a vulnerability

A monitored disclosure address and public procedure will be published before release. Do not include live tokens, credentials, pairing codes, or private telemetry in a report. SystemLens makes no compliance-certification claim.