# Security

What the agent can do, what leaves the machine, and how secrets are held.

- [content-security-policy.md](https://beebox.run/docs/security/content-security-policy.md): The CSP the web app serves and what it forbids.
- [overview.md](https://beebox.run/docs/security/overview.md): What the agent can do, what leaves the machine, and where data lives.
- [secrets.md](https://beebox.run/docs/security/secrets.md): The machine-level credential store and how a box is granted a secret.