Trust & Safety
Security at Vymerce Nexus
Security is not a feature — it's the foundation. Every component of our infrastructure is designed with the assumption that the network is hostile and user data is precious.
🔑
Password Security
- ✓Passwords hashed with bcrypt (cost factor ≥ 12)
- ✓Plain-text passwords never stored or logged
- ✓Minimum 8 characters enforced at registration
🔐
Transport Security
- ✓All traffic encrypted with TLS 1.2 / 1.3
- ✓HSTS enforced on all domains
- ✓Secure, HttpOnly, SameSite cookies only
🏗️
Infrastructure
- ✓Database access restricted to service accounts with minimum permissions
- ✓Row-level security (RLS) enforced at database layer
- ✓Secrets stored in environment variables, never in code
📊
Monitoring & Logging
- ✓All API requests logged with timestamps and status codes
- ✓Anomaly detection on login attempts and wallet operations
- ✓Admin audit trail for all privileged actions
💻
Code & Dependencies
- ✓Dependencies audited on every deployment
- ✓Input validation and sanitization on all API endpoints
- ✓SQL injection prevention via parameterized queries only
🔍
Responsible Disclosure
- ✓Security issues may be reported to us directly
- ✓We acknowledge all reports within 48 hours
- ✓We do not pursue legal action against good-faith researchers
Found a vulnerability?
We appreciate responsible disclosure. If you discover a security issue, please contact us privately before public disclosure.
support@nexus.vymerce.com