Security Policy

This policy summarizes the security practices we apply to this website and to installations we host or manage.

Application Security

This site uses parameterized database queries, contextual output escaping, CSRF protection on state-changing forms, and a Content Security Policy to reduce common web vulnerabilities.

Authentication

Administrative access uses modern password hashing and session security practices, including session regeneration on login and secure cookie attributes.

Infrastructure Security

Hosted environments receive security patching, file-permission hardening, and monitoring as described in our OJS Hosting service.

No Absolute Guarantee

No security measure eliminates all risk. We won't claim "100% security" — our commitment is to follow documented practices, patch known vulnerabilities promptly, and respond transparently if an incident occurs.

Reporting a Vulnerability

If you believe you've found a security vulnerability affecting this site or a service we manage, see our Responsible Disclosure policy.