Security by default, not an option

Standards and best practices

Every project applies proven security practices, right from the design stage.

• Everything entered or displayed on the site is checked, to stop malicious content from slipping in.
• Every action taken is verified, to make sure it really comes from you.
• Your login information is protected against interception.
• The components used to build the solution are automatically scanned, to detect any known vulnerability as soon as it's disclosed.

Updates

Security updates are included as standard, with no effort required on your part.

• Tracking of security patches released for the components we use.
• Prompt application of critical fixes.
• Automated tests before every deployment.
• Keeping your solutions on actively supported versions.

Encryption

Encryption of your data can be applied on every project, with no extra configuration on your part: both while it's stored (at rest) and while it's moving between two systems (in transit).

If a device is stolen or a server is compromised, encrypted data remains unreadable to anyone without the decryption key: the risk of a leak is reduced, for your business and your clients alike.

File processing

When a task needs to produce a temporary file (an export, a PDF, a reworked image...), we favor in-memory generation over writing it to the server's disk.

Even if an attacker gains access to the server, there's simply nothing there to find: the file only exists in memory, for the duration of the request that generated it — reducing the surface exposed.