Security

How spawnpoint protects your account, your tokens, and the code you deploy. We're early, so this evolves, here's where things stand today.

Accounts & tokens

• Passwordless login. You sign in with a magic link, so there's no password to leak.
• Tokens hashed at rest. API tokens are stored only as hashes, the raw value is shown once and we can't recover it.
• Revoke anytime. Kill a token or terminate a project from the console and it stops working immediately.

Isolation

Each project you deploy runs in its own lightweight virtual machine on infrastructure we manage. Projects don't share a runtime, so one deploy can't reach into another.

Teardown

Terminate is one click. The machine is destroyed and the URL is freed right away, no lingering processes, no surprise bills.

Your data

We store what's needed to run your projects: your account email, project metadata (name, status, URL), and the code bundles you deploy. Nothing more.

Reporting an issue

Found something? We want to hear about it. Email founders@spawnpoint.lol and we'll respond quickly.