---
title: TLS / certificates
slug: tls-certificates
createdAt: 2026-02-24T04:06:23.850Z
---

### In transit

- TLS for agent ↔ control plane communication
- TLS for web UI/API access
- TLS for integration calls (Git, observability, identity providers)



### Enterprise requirements

Document support for:

- Custom CA trust bundles
- Internal PKI certificates (on-prem)
- TLS termination models (if self-hosted)
- Certificate rotation practices



### Best practice

- Never disable certificate verification in production
- Rotate credentials/certs on schedule
- Separate certs per environment where possible