Security

Small surface. Clear boundaries.

BlindRoute separates public web, license/payment control, and VPN node operations.

Infrastructure model

• Astro serves the public marketing site.
• Laravel manages licenses, payments, API, queues, and admin.
• Go Agent runs on VPN nodes and accepts protected internal peer operations.
• BTCPay is external or separately deployed.

Responsible disclosure

Send security reports to security@blindroute.example.