Protected passwords
Scrypt hash with unique salt and a strong-password policy. Mandatory change of temporary passwords.
Security
Care in every layer.
The protections already active in ALN Hub.
Sessions and CSRF
HttpOnly, SameSite and Secure cookies, automatic expiry and a CSRF token on every change.
Limits and audit trail
Attempt limits per IP and per account, and an audit trail of administrative actions.
Workspace isolation
Each customer only accesses their own hub. Only ALN administration can act on other profiles, with logging.
Security headers
Strict CSP, HSTS, clickjacking protection and uploads validated by file content.
Signed webhooks
Every lead sent to your tool carries an HMAC-SHA256 signature so you can verify the source.
Any questions?
Talk to the ALN Digital team.