Security

Secret data never leaves your VPS

The local agent handles credentials inside your environment. The protected core receives only de-identified data required for processing.

Customer VPS
LOCAL

Local component

Stores the PerfectPanel Admin API key, Bot Token, Telegram API Hash, 2FA, Telegram sessions and supplier routing.

support-api.asmmr.pro
CORE

Cloud core

Processes de-identified events and tracks subscriptions, requests and tokens.

registry.asmmr.pro
IMG

Private registry

Delivers ready local-component images for installation and updates.

Principles

Separated architecture and minimal data

The public website, cloud core, registry and customer installations operate as separate environments.

01

No secrets in the cloud

Keys, passwords, 2FA and sessions remain on the customer VPS.

02

De-identified events

Only the minimum data required to process a specific request is sent.

03

Configured actions

Automated operations follow configured rules and failure reasons.

04

Subscription control

When time or limits expire, new decisions and actions pause automatically.

05

Separate hosting

The public website is not hosted on the cloud core VPS.

06

No secrets on the website

The website does not accept keys, tokens, sessions or internal customer data.

Public boundary: IP addresses, ports, component versions, image names and internal customer data are not published on the website.
Free start

Try AutoPilot on your panel

Get 7 days and 300 requests free. Installation and setup are free for our first customers, including connection checks and help launching the first workflows.