Platform Security
Security practices and vulnerability reporting.
Table of Contents
Platform Security
We implement industry-standard security practices to protect publisher and visitor data.
Security Measures
- HTTPS/TLS encryption
- Bcrypt password hashing
- CSRF tokens on all forms
- Rate limiting & captcha
- Httponly sessions & strict mode
- Security event logging
- Payment webhook signature validation
Responsible Disclosure
Report vulnerabilities to security@difilm.site. Do not publish before we patch (90-day coordinated disclosure).