Security

SECURITY
PRACTICES

Security is treated as part of engineering quality: identity, least privilege, secure headers, secret handling and responsible reporting.

Access control

Identity-backed product routes

Protected product paths use provider identity and session validation before member-only content is served.

Secrets

No credentials in source

Runtime secrets are supplied through deployment configuration and kept out of generated static pages.

Headers

Browser security controls

Security headers and transport protections are handled at the delivery layer wherever the platform supports them.

Report

Responsible disclosure

Send vulnerability details to hello@srivantechnologies.com with the affected URL, reproduction steps and impact. Please avoid public disclosure until there has been time to investigate.