Security

ModelQuad is built local-first. We do not operate cloud relays, intermediate proxies, or centralized credential stores.

Model

ModelQuad is a local Windows application. Its control interfaces bind to your machine only (localhost). This release has zero ModelQuad cloud endpoints.

Credentials

ModelQuad never stores, syncs, or relays your credentials or tokens to any external service.

Release integrity

Every release publishes a SHA-256 checksum. Beta builds are currently unsigned; a code-signing pipeline is built and signing is planned before general availability — until then, verify checksums.

Reporting a vulnerability

A dedicated security contact is being set up. Until then, use the support channel and mark your message "SECURITY".