Security

How account access and the public website are currently protected.

This page covers the public website, sign-in flow, and where to report a security issue.

Accounts

User accounts require email confirmation. New accounts can also require manual approval before full access is granted.

Website requests

Public forms are validated server-side and protected with anti-spam and rate-limiting controls.

Access

The website is public, but the application itself is protected behind sign-in and account checks.