Security Centre — Expertini Research

Platform Security

Expertini Research is built on enterprise-grade infrastructure with multiple layers of security:

• HTTPS encryption on all pages (TLS 1.3)
• Cloudflare WAF (Web Application Firewall) and DDoS protection
• Rate limiting on all API endpoints
• Bot detection and IP blocklisting
• Elasticsearch cluster secured behind private network

Account Security

• Passwords are hashed using bcrypt before storage — we never store plain-text passwords
• Session tokens are cryptographically generated and rotated on login
• Google OAuth available as a secure login alternative
• Account lockout after repeated failed login attempts
• Honeypot fields on all forms to prevent automated bot submissions

Payment Security

All payments are processed by Stripe, a PCI DSS Level 1 compliant payment processor. Expertini Research never stores credit card details on our servers.

Responsible Disclosure

If you discover a security vulnerability in Expertini Research, please report it responsibly to research@expertini.com with the subject line "Security Disclosure".

Please do not disclose vulnerabilities publicly before we have had the opportunity to investigate and patch them. We appreciate responsible disclosure and will acknowledge your contribution.

Data Backups

Our Elasticsearch cluster is backed up daily to NFS shared snapshot repositories. Backups are retained for 30 days. We perform regular backup restoration tests.

System Status

Monitor real-time platform status at expertini.statuspage.io.