Security
Security is a system, not a badge.
SaTiN's architecture reduces exposed services, verifies payments server-side, limits database privileges and adds operational recovery controls.
Security program
Defence in depth across the stack.
Data protection
- TLS for public traffic
- Private application/database network
- Data minimisation
- No wallet/bank credentials stored
Infrastructure
- Non-root application containers
- Read-only filesystem where practical
- Dropped Linux capabilities
- Resource/health limits
Application security
- Server-side validation
- Rate limiting
- CSRF protection
- Generic production errors
Access control
- ASP.NET Identity
- Strong password policy
- Account lockout
- MFA & session revocation
Operational security
- Versioned migrations
- Least-privilege DB roles
- Backups & restore tests
- Monitoring & alerts
Supply chain
- Dependabot
- CodeQL/SAST
- NuGet/npm audits
- Container & secret scanning
Responsible disclosure
SaTiN will publish a dedicated company security mailbox (recommended: security@your-domain) and a clear vulnerability-reporting process as part of production operations.