Trust & Security
Security at Behalf
Understand what Behalf controls, how hosted sign-in works, and where the boundary ends. This describes the LinkedIn developer preview.
Server-controlled browser authority
You connect through hosted Anchor OmniConnect. Anchor manages the saved sign-in identity and browser profile, including credentials when required by your chosen sign-in method. Behalf stores server-side identity references and encrypted browser capabilities. Agents receive a scoped Behalf grant token.
Encryption at rest for cached content
Browser capabilities and configured cached content use AES-256-GCM encryption at rest. The controlled browser connection requires an encryption key. Read observations are returned to the authorized caller without copying conversation bodies into action receipts. Data in transit uses TLS.
Scoped policy enforcement
The managed execution path checks the grant, supported action, policy, expiry, and budget. Agent writes require owner approval of the saved target and content. These controls apply to actions sent through Behalf; they do not govern access an agent independently holds elsewhere.
Action receipts
Action requests, policy decisions, approvals, and execution outcomes are recorded. Receipts distinguish verified completion from failure and unknown outcomes. An uncertain write is not automatically retried.
Grant revocation
Revocation blocks new dispatches and is checked again before the controlled browser commits a write. It may not cancel an action already in flight or undo an action the destination has accepted. Browser cleanup is separate and can fail; an uncertain outcome needs reconciliation.
Rate-limiting & lockout
Sign-in attempts use per-account lockout and request throttling. Password-recovery requests are also throttled. These controls reduce repeated attempts; they are not a guarantee against every form of abuse.
JWT session invalidation
Owner login sessions use signed JWTs and a live token-version check. Agent tokens are bound to one grant; its status and expiry are checked on each request. Account suspension also blocks managed execution.
Least-privilege delegation
The entire model is built around granting the minimum access required for a task, for the minimum time, with full accountability — not all-or-nothing password sharing.
Report a vulnerability
Found a security issue? We want to hear from you. Email security@behalf.work with details and steps to reproduce. Please give us a reasonable window to remediate before any public disclosure.
See also our Privacy Policy and Terms of Service.