SECURITY
Security with clear boundaries.
A good part of security starts with not adding what is not needed. The website keeps a simple architecture and a deliberately small surface.
Reduced surface
The current website runs no authentication, payments, user profiles or database logic in the browser.
It also loads no third-party scripts for marketing, chat, analytics or personalisation.
Website controls
The published configuration includes secure transport, controlled redirects and headers intended to reduce unwanted browser behaviour.
- HTTPS on the hosting endpoint;
- Strict-Transport-Security in the published configuration;
- X-Content-Type-Options: nosniff;
- X-Frame-Options: DENY;
- restrictive Referrer-Policy and Permissions-Policy.
Responsible reporting
Responsible vulnerability reports may be sent to contact@noniverus.com. Avoid sending third-party data, secrets or unnecessary exploit details.
A security.txt file will be made available when a monitored security contact exists and the required details can be maintained correctly.