Security-first foundation for business websites.

Account Security

• OTP-based authentication for account access.
• Role-based access controls for site-level permissions.
• Server-side token validation before protected actions.

Platform & Infrastructure

• Managed infrastructure with continuous updates and patching.
• Secure API integrations for billing, publishing, and domain flows.
• Operational monitoring for high-risk workflows and failures.

Data Handling

• Data is scoped to authorized users and associated sites.
• Sensitive operations are performed from trusted server routes.
• Audit-relevant events are tracked for billing and deployment paths.

Responsible disclosure

• Send details to [email protected] with subject line: Security Report.
• Include reproduction steps, impact, and proof-of-concept if available.
• Allow us reasonable time to validate, fix, and deploy mitigations.
• Avoid public disclosure until remediation is confirmed.

Security contact

For urgent security concerns, include your account email, site ID, and a clear impact summary so our team can triage faster.