Security at Aurneon
Security is engineered into everything we build — for our own platform and for every system we deliver.
Last updated: July 2026
Secure by design
We follow OWASP Top 10 best practices and a defense-in-depth model. Our applications enforce a strict Content Security Policy, HSTS, secure cookies and comprehensive security headers.
Data protection
Data is encrypted in transit and at rest. We apply least-privilege access, environment isolation and full audit logging across all environments.
Application security
All input is validated on both client and server, output is encoded, and requests are rate-limited and protected against abuse. Dependencies are continuously scanned for vulnerabilities.
Responsible disclosure
If you believe you've found a security vulnerability, please contact security@aurneon.com. We investigate all legitimate reports promptly.