100669100012100902CWE-89SASTDASTTLS1.3XSSCVE-2024-218930x4F2A9COWASP_A05Fintrack APIpen_testauth_bypass100262100083SHOP-01min_score 8.1lockrift_auditsigned_report100669100012100902CWE-89SASTDASTTLS1.3XSSCVE-2024-218930x4F2A9COWASP_A05Fintrack APIpen_testauth_bypass100262100083SHOP-01min_score 8.1lockrift_auditsigned_report

ShopEaseprod_region us-east-1scope API + auth2 day SLAexpert L3remediationfalse_positive 0.02Deep auditStandard auditQuick scanPII redactedNDA on fileengagement_44f2payout pendingevidence packCWE-22CWE-352rate_limit 429ShopEaseprod_region us-east-1scope API + auth2 day SLAexpert L3remediationfalse_positive 0.02Deep auditStandard auditQuick scanPII redactedNDA on fileengagement_44f2payout pendingevidence packCWE-22CWE-352rate_limit 429

GET /v1/usersPOST /audit/requestwss://sessionHMAC validmTLSrotate_keyszero_trustSIEMSOC2 mapchecklist 14/18next_review 24htoken_exp 3600encrypted_at_restaccess_logip_allowlist2FA requiredcomplianceGET /v1/usersPOST /audit/requestwss://sessionHMAC validmTLSrotate_keyszero_trustSIEMSOC2 mapchecklist 14/18next_review 24htoken_exp 3600encrypted_at_restaccess_logip_allowlist2FA requiredcompliance

Privacy

A full privacy policy will list how Clerk, Stripe, Persona, Resend, Supabase, and Sentry handle data, consistent with the production map in the spec.

This page is a shell while the product build catches up. Navigation and sign-in are live.

Back to home