Security
Outbound-only agents, encrypted SSH credentials, data residency, and how to report issues.
Kubeara is a control panel for infrastructure you already own. Databases, models, and apps run on your machines — not on a shared Kubeara data plane.
Self-hosted Kubeara is MIT licensed. You can inspect the code, run the panel on your network, and stop using the product without migrating workloads off your servers.
Kubeara does not host your Postgres data, GPU weights, or application files. Privacy policy.
Built to stay out of the blast radius
Control-panel bugs that expose thousands of self-hosted servers usually share a pattern: inbound management, credentials in the clear, and the panel sitting in the same blast radius as production data. Kubeara is designed against that class of failure.
Outbound-only agent
After connect, the agent initiates outbound connections. You do not leave an inbound Kubeara management port open for the panel to scrape the host.
Credentials never in plain text
SSH keys and server credentials never touch the database in plain text. Encryption is the default, not an Enterprise add-on.
Data stays on your infrastructure
Workloads, volumes, and service logs live on the servers you connect. Kubeara is not a second copy of customer data.
Actions you can show an auditor
Actions are timestamped and attributed. You can answer where processing happens and who had access.
What we store — and what we never see
| Surface | What it contains |
|---|---|
| Cloud control panel | Account name, email, hashed password, session and security logs, plus server metadata you provide (host, username, connection details). IPs may be kept to operate and protect the service. |
| Your workloads | Databases, object storage, LLM weights, Docker volumes, and application code stay on your servers. Stopping Kubeara does not take those services down. |
| Self-hosted panel | Panel and workloads both stay on infrastructure you control. Nothing has to leave your network. |
Controls for teams and compliance
| Control | Where it lives |
|---|---|
| Automatic TLS | Every deployed service gets certificates provisioned and renewed. |
| Teams and RBAC | Invite operators; roles limit who can deploy or change servers. |
| MCP permissions | Assistants use your Kubeara role — not a new SSH key per tool. See MCP. |
| Inspectable source | Core is MIT licensed on GitHub. |
| Audit logs | Enterprise: who did what, when (GDPR, HIPAA, UAE PDPL questionnaires). |
| SSO and LDAP | Enterprise: identity follows your IdP. |
Core protections ship in the product. SSO, LDAP, and full audit logs are how we sustain Enterprise without watering down the MIT-licensed core.
Report a vulnerability
Email [email protected] for sensitive reports, or open an issue on kubeara/core without secrets. Typical response: two business days during beta.
Also: contact form.