Security

Our Security Philosophy

Security is a feature, not a checkbox. WebGuardian AI is built by a team that ships security products — we hold our own infrastructure to the same standards we demand from our platform.

Compliance Standards

Infrastructure Security

• All data encrypted in transit via TLS 1.2+.
• Data at rest encrypted using AES-256.
• Hosted on EU-region servers (Hostinger) with physical access controls.
• Automated daily backups with point-in-time recovery.

Application Security

• Input sanitization and parameterized queries on all database interactions.
• Rate limiting and DDoS mitigation at the network layer.
• Regular dependency audits and CVE patch cycles.
• HTTP security headers (CSP, HSTS, X-Frame-Options) enforced on all responses.

Access Controls

• Least-privilege access model for all internal systems.
• MFA required for all administrative accounts.
• Audit logs retained for 12 months.

Vulnerability Disclosure

If you discover a security vulnerability, please report it responsibly to developer@webguardian.tech. We commit to acknowledging reports within 48 hours and resolving critical issues within 7 days.

We do not pursue legal action against good-faith security researchers.

Contact

Security enquiries: developer@webguardian.tech