ROOTCASTLE / ENGINEERING LAB
Security & trust
Implemented controls, data boundaries and reporting.
Implemented boundaries
LAB calculations run in the browser. There is no connection to industrial endpoints, private databases or customer telemetry. Audio starts only after user interaction.
Publishing panel
Password hashing, session rotation, CSRF checks and login throttling are implemented. Drafts require authentication. Content storage is outside the web root; uploaded images are re-encoded.
Headers and dependencies
Deployment configuration includes CSP, nosniff, referrer and permissions policies. The npm lockfile pins dependencies. No certification, continuous dependency scanning or published SBOM is claimed.
Responsible disclosure
Report security findings with the affected URL, reproduction steps and impact. Do not send customer data or credentials; ask for a safe sharing channel in the first message.
Contact →