Security Center

Security is not an afterthought here — it is part of the design from the start. Here are the measures we apply.

Transit & storage

All traffic is encrypted with HTTPS + HSTS. Sensitive data is collected minimally and stored encrypted where needed.

Access control

The admin panel is role-based; sessions are protected with secure cookies, timeouts and re-authentication.

Secure development

Parameterized queries (SQLi), output escaping (XSS), CSRF tokens and a content security policy (CSP) are our standard practices.

Backup & recovery

Regular backups plus restore drills keep us ready against data loss.

Report a vulnerability

Found an issue? Reach us via /.well-known/security.txt. We support responsible disclosure.