Security Posture
Transparent security information for NeuralMind. No uptime theater — just the facts security teams ask about.
Latest Release
Software Bill of Materials
A CycloneDX SBOM is generated for every release.
The SBOM for v1.3.0 is still being generated — it appears here shortly after each release. Meanwhile, see the SBOM workflow →
Source Integrity
Verify the tarball integrity against the release SHA-256:
curl -sL https://github.com/dfrostar/neuralmind/archive/refs/tags/v1.3.0.tar.gz | sha256sum
Compare against the SHA-256 on the GitHub release page.
Vulnerability Reports
Last report: — (none received to date). Responsible disclosure welcome.
Compliance & Certification
Architecture supports, certification is yours
NeuralMind's architecture supports GDPR, SOC 2, HIPAA, and ISO 27017 requirements. We provide the evidence (audit trail, SBOM, hash chain); certification is maintained by the operator. See COMPLIANCE-SUMMARY.md.
Next certification target: SOC 2 Type I — Q3 2027
Audit Trail
Every query is logged with a per-user actor attribution, stored locally in an append-only SHA-256 hash chain. The trail is tamper-evident, searchable, and exportable in JSONL/CEF formats.
Introduced in v0.27.0 (B-Audit). Release notes →
This page is updated quarterly, or on significant security events.
View on GitHub →