Security Practices
Security at Aetheris Vision
The controls below describe how this website protects requests, administrative access, and client accounts today.
Request Protection
Transport and Browser Controls
- ✓HTTPS transport for the deployed website
- ✓HSTS to direct browsers to use secure connections
- ✓Content Security Policy with per-request nonces
- ✓X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy headers
API Controls
- ✓Rate limiting on API routes that accept public submissions or job requests
- ✓Security headers applied to page and API responses
Access and Data
Account Access
- ✓The administrative area is passphrase-gated
- ✓Client portal sign-in uses emailed magic links
Hosting and Storage
- ✓The application is hosted on Vercel
- ✓Client portal accounts and records use a serverless Neon Postgres database
Software Maintenance
Dependency Updates
Application dependencies are versioned in the project lockfile and updated as part of ongoing software maintenance.
Questions About These Practices?
Aetheris Vision can explain the controls currently used by this site and discuss project-specific security requirements during a consultation.
Contact Aetheris Vision