X
// Security
Security
first.
Enterprise-grade security at every layer. Your data and your clients' data are protected by industry best practices.
SSL/TLS Encryption
End-to-end encryption for all data in transit. HTTPS enforced everywhere.
Session Security
Device fingerprinting, concurrent session limits, idle timeout, IP binding.
Rate Limiting
Redis-based rate limiting with automatic account lockout after failed attempts.
2FA Enforcement
Two-factor authentication required for admin and manager roles.
CSRF Protection
Double-submit cookie pattern with meta tag validation on all state-changing requests.
SSRF Protection
DNS lookup + private IP blocking on image proxy and URL preview routes.
Input Validation
Zod schemas on all API endpoints. SQL injection prevention via Prisma ORM.
Distributed Locking
Redlock for concurrent operations. Database advisory locks for critical sections.