Security

Our practices

• Encryption in transit (TLS) for all API and dashboard traffic.
• API keys are stored as salted hashes, never in plaintext.
• Least-privilege access controls and audit logging for internal systems.
• Continuous monitoring, rate limiting, and abuse detection on the gateway.

Reporting a vulnerability

If you believe you have found a security issue, please report it privately to [email protected]. Give us a reasonable opportunity to investigate and remediate before any public disclosure. We appreciate coordinated disclosure and will acknowledge valid reports.

Service status

Real-time uptime and incident history are published on our status page.