Security

Application Security

Secure development, vulnerability management, and common controls.

Secure development

Changes are reviewed in version control. CI runs linting, type checks, security drift checks, and dependency audits.

Password policy enforcement

Signup, password reset, and forgot-password flows share one server-side policy module aligned with NIST SP 800-63B:
length bounds (8–256), no composition rules, compromised-password screening (local blocklist plus HIBP k-anonymity with
fail-closed behavior when the breach API is unreachable), and rate limits on recovery endpoints. Policy constants and
user-facing hints are defined in the shared contract package so API validation and web forms stay aligned.

Vulnerability management

Dependency and container image scanning are integrated into release workflows. See our vulnerability management runbook.

Application controls

Protections include CSRF origin validation and tokens, content security policy, input validation, rate limiting, and React-safe rendering defaults.

Marketplace and third-party packages

Public executable third-party Marketplace installs are available for eligible plans when packages
carry a verified publisher signature, sandbox attestation, and are not quarantined. Platform-wide
quarantine kill-switch and publisher key registry (including revoke) are implemented. Package
sandboxing is live and enforced: sandboxed iframe UI host and Worker/WASM tool host (allowlisted
imports only; no in-process third-party JavaScript).