Security
Verified security controls and how to report a vulnerability.
Implemented controls
- TLS transport, a private production database, and verified backups.
- Bcrypt password hashing; one-time reset/verification tokens stored as hashes.
- RBAC, a protected primary owner, session revocation, audit events, and log sanitisation.
- Idempotent background processing and credit restoration for terminal runs with no output.
Responsible reporting
Report findings to hello@aiblueprint.web.id with minimal reproduction steps. Do not access others’ data, use social engineering, disrupt service, or publish details before impact is assessed.