Protected passwords
Scrypt hashing and a strong-password policy. Administrative access includes attempt limits.
Care in
every layer.
Explore implemented protections and what is being prepared for commercial operation.
Controlled sessions
HttpOnly and SameSite cookies, session expiration and CSRF tokens protect authenticated operations.
Publishing separate from editing
Visitors access the published profile. Editing routes require administrative authentication.
Next security steps
Transactional recovery email, MFA and production infrastructure are among the requirements before commercial launch.
An open conversation with ALN.
Talk to ALN DigitalWe’re here to answer questions about the product and your data.