Security

Last updated: October 31, 2026

NeonSpace sits inside your home network, so we treat it like a guest we'd want in our own house: it sees what it needs, it changes nothing without you, and it keeps your information at home. Here is how.

Your information stays at home

• Your device list, names, history and settings are stored on the computer NeonSpace runs on. There is no NeonSpace account and no cloud copy of your network.
• Passwords, camera pictures, files and what you watch are never sent to us. See the privacy policy for exactly what does leave your network and why.

Looking is open, changing needs your PIN

• Anyone on your Wi-Fi can open the dashboard and look at the map, which is handy for the family.
• Everything that changes something or shows something private needs your PIN: settings, starting or stopping apps, cameras and the AI chat.
• Camera snapshots never appear in kids mode or TV mode.
• For Proxmox, NeonSpace asks for a read-only token, so it can see your server but can't change it.

The AI can suggest, only you can approve

• Before you send anything, the 🔒 button shows the exact text the AI will see.
• The AI can only suggest a change from a short, fixed list. Nothing happens until you approve it twice ("Approve", then "Are you sure?"), and your own dashboard carries it out. NeonSpace AI can't connect into your network.
• Device names and log lines are treated as information, never as instructions. A device named "ignore your rules" can't take control of the helper.
• NeonSpace AI runs on an open-source model on hardware we operate. Chats aren't saved and aren't used to train anything.

Keys, downloads and updates you can trust

• Pro keys are digitally signed and checked on your own computer, so they can't be forged. They keep working through short internet outages.
• The installers fetch what NeonSpace needs (such as Node.js) only from the official sources, and check every download against its published fingerprint before using it.
• NeonSpace picks a free network port instead of taking one another app is already using.

Our side

• neonspace.app is served only over encrypted HTTPS, with strict browser protections that block injected scripts. The domain is signed (DNSSEC) and protected against fake emails sent in our name.
• Our AI service is reached through an encrypted tunnel, with no open ports. Its admin tools can't be reached from the internet at all, and the service runs in a locked-down, read-only container.
• Payments are handled by Stripe. We never see your card number. Every payment notice from Stripe is signature-checked and counted only once.
• Our source code is kept private, and changes to our systems need a person's approval.

Tips for a safer home network

• Set a PIN on first setup, and pick one your kids won't guess.
• To see your dashboard away from home, use Tailscale (free). Never forward a port to it.
• Keep your computer's updates on, and keep backups of anything you can't replace.

Found a problem?

If you think you've found a security issue, please email [email protected] rather than posting it publicly. We'll reply quickly and credit you if you'd like.