Security

Private by design.

Relayz runs on its owner's own machine. The internet reaches it only over HTTPS, and every way in has its own protection.

Keys and budgets

The public API only answers with a valid key, limited to its models and a monthly budget. Key management is never reachable from the internet.

Signed identities

Every chat request carries a signed identity. Nobody can use someone else's sign-in, and everyone has their own daily limits.

Passwords stay with OpenAI

People link ChatGPT on OpenAI's own website with a one-time code. Relayz never sees the password, and unlinking takes one click.

Verified sign-up

Public Open WebUI sign-up stays off. Accounts are created after email OTP; chat needs an active plan. Admin sign-in locks out after repeated failures.

Agent isolation

Every Work task
gets its own sandbox.

Relayz Work runs code to build your files, so each task is sealed off from everything else.

  • Its own short-lived container, deleted when the task ends
  • Sees only that task's folder, not the computer's disks or settings
  • Commands have no internet access; research uses the provider's own search
  • Capped memory and CPU, no special system rights
  • Nothing is ever sent, emailed or posted anywhere

Download links that protect themselves

Files made by Relayz Work get links with a random 128-bit ID that can't be guessed, and they expire after 7 days. Only images open in the browser; everything else downloads, so a file can't run as a web page on the Relayz site.

Every way in

Protection at each door

Entry pointProtection
ChatSign-in required; Relayz OTP sign-up; plan required for chat; providers set per person
APIApp key required; only chat, images and the model list are reachable from the internet
Relayz AdminAdmin password; 5 failed sign-ins from one address lock it out for 15 minutes
Relayz Work filesUnguessable links that expire after 7 days
Relayz CodeYour own coding key, stored in your editor's secret storage; edits and commands need your approval
EverythingHTTPS only, with HSTS; internal services aren't reachable from outside

Ready when you are