Security

Architecture models describe your most sensitive systems. This page is an honest summary of where security stands during the beta.

Your model stays in your repository

Scapius compiles .ea files that live in your git repository. The source of truth is your repo, protected by the access controls, review process, and audit history you already run.

Enterprise access control, in development

SAML single sign-on, SCIM provisioning, and role-based access control are being built now, ahead of general availability. If your organization has specific identity requirements, tell us early and we will test against them.

Reporting a vulnerability

If you find a security issue in Scapius, report it privately through our GitHub organization and give us reasonable time to fix it before disclosure. We credit reporters who do.