Security

Vybrane is made by UNYFO, Inc. Last updated November 10, 2026.

People approve every change

Nothing is sent, posted, merged or changed on its own. A person taps Approve, or a founder asks for exactly that in their own words, which counts as their approval. Code changes only arrive as pull requests on their own branch; a person merges them.
Questions for your coding agent run with read-only access to the repo and no shell: they can’t push, open a pull request or run a command, whatever text they read.
What an agent saves to memory waits as a suggestion until a founder keeps it.
Autopilot is off unless a founder switches it on. It only does the kinds of thing they ticked (start a fix for a bug it found, merge a pull request whose checks all pass, but never a fix it started itself, keep a decision it noticed), up to a daily limit, and says each one in the chat and the audit log. One switch turns it off; Pause stops it too.
Before a fix, you see exactly what the agent will get and can leave lines out.
A founder can pause every action at once, and every action is in an audit log: who asked, who approved, what ran.

The Brain never tells anyone more than they may know. Founders can mark memory and documents for founders only, or for chosen roles, and that holds in Ask, team chat, Slack, Telegram and connected agents.
A room’s answer only uses what everyone in that room may see.
Roles decide what each person may ask the Brain to do.

Your own Claude or Codex can take fix jobs over MCP, and changes still wait for Approve: how it works.
GitHub connects through a GitHub App on the repos you pick, with no pasted personal token: how it works.
Database connections are read-only and limited to the tables a founder ticked. Most answers are counts; a question can also return a short table (30 rows at most) from those tables, with email addresses hidden.
Saved logins and tokens are sealed with AES-256 before they are stored.
Uploaded files are checked by name and by content: only documents and images are accepted, and scripts or programs (.php, .jsp, .exe and the like) are refused even when renamed. Files are kept in private storage that cannot run anything, under a name we choose, and come back only through a short-lived download link.
Agents connect with OAuth 2.0 and PKCE, act as the person who signed in, and only in the workspace they picked. Access tokens last 7 days; refresh tokens rotate.

Hosted on Vercel; data in Supabase (Postgres), encrypted at rest and in transit (HTTPS only).
AI by Anthropic and Azure OpenAI. Your data is not used to train models for anyone else.

Email founder@findvyb.com with “Security” in the subject. Please give us a reasonable time to fix it before telling anyone else.