Security First
Built Secure from Day One
Security is not a feature we added later. It is a foundation we built everything on.
How We Protect You
Security Practices
Authentication
Better Auth with multi-factor authentication, session management, and brute-force protection. Every access point is guarded.
Authorization
Role-based access control with a visual role builder. Granular permissions ensure least-privilege access across your organization.
Data Encryption
AES-256 encryption at rest and TLS 1.3 in transit. Your code and data are encrypted at every stage of the pipeline.
Infrastructure
Isolated deployment environments on Railway with automatic scaling, health monitoring, and geographic redundancy.
Code Security
Automated dependency audits, vulnerability scanning, and supply chain verification on every build.
Monitoring
Real-time logging, alerting, and anomaly detection. We know about issues before they become incidents.
Standards
Compliance and Standards
We follow industry best practices and are working toward formal certifications.
SOC 2 Type II
In progress. Targeting completion Q3 2026.
GDPR Ready
Data processing agreements, right to erasure, and data portability built in.
OWASP Top 10
All OWASP Top 10 vulnerabilities addressed in our security architecture.
Responsible Disclosure
Report a Vulnerability
Found a security issue? We take every report seriously and respond within 48 hours.
security@durante.dev
Response within 48 hours
We follow coordinated disclosure practices and credit researchers who report valid vulnerabilities.