Security & Privacy Architecture
Orbit works natively on your Mac. Your workspace configurations and files stay on your computer, protected by macOS system safeguards.
Zero Cloud Sync of Your Workspaces
Orbit is engineered from the ground up as a local-first macOS application. Your workspaces, application paths, project directories, and window coordinates remain strictly on your device and are never transmitted to external cloud servers.
100% Saved on Your Computer
How Orbit stores and protects your workspace configuration on your local macOS drive.
~/Library/Application Support/Orbit/config.jsonOrbit locks its application directory with 0700 permissions and config.json with 0600 permissions so only your authenticated Mac user account can read or modify your workspaces, notes, masked secrets (••••••), and local caches (license.dat, device_history.dat, feedback_history.json).
Safe macOS Permissions & Full Privacy
What Orbit does (and never does) with macOS Accessibility, Apple Events, and optional Microphone permissions.
- • Accessibility API: Reading, moving, and resizing window frames across your displays
- • Apple Events Automation: Opening and closing configured apps and browser tabs
- • Microphone (Optional): Used only when you click record inside Feedback to attach a voice note
- • Zero screen recording or pixel capture
- • Zero keystroke logging or input monitoring
- • Zero background audio listening or clipboard snooping
Orbit actively sanitizes inputs across its core automation systems. AppleScript strings escape control characters to prevent injection attacks, and browser URL targets are validated against malicious pseudo-protocols, permitting only standard http and https schemes. Additionally, any optional crash or diagnostic logs automatically convert local user directories to ~ and redact authorization tokens and keys to ensure zero personal data exposure.
Secure License & Hardware Seat Binding
SHA-256 device fingerprinting, local persistence, and macOS Keychain protection.
Raw hardware serial numbers never leave your Mac; they are hashed locally via SHA-256 into instance_id alongside platform UUID and MAC address for seat verification.
Active license state is stored in encoded license.dat and 16-day trial hardware bindings are protected in macOS Keychain (com.orbit.Orbit.license).
Once activated, Orbit launches and switches workspaces offline without requiring an active internet connection.
Ed25519 Verified Updates & Native Mac Performance
Apple Hardened Runtime and Sparkle Ed25519 cryptographic update verification.
Updates are fetched over HTTPS (orbit.graond.com/appcast.xml) with system profiling disabled (SUEnableSystemProfiling = false) and verified with Ed25519 public-key signatures before extraction.
Built natively for Apple Silicon & Intel Macs (macOS 12.0 Monterey+) with Apple Hardened Runtime and minimal memory/CPU overhead.
Security Questions & Vulnerability Reporting
Direct 24-hour response channel for security researchers and customers.
We acknowledge all security disclosures within 24 hours.