Security Overview

Technical and operational security practices for the EcomSolveBD platform.

Application security

Authentication via secure sessions / JWT with HTTP-only cookies in production.
Input validation on APIs; protection against common web vulnerabilities.
Dependency updates and security patching on a regular cadence.

Infrastructure

Hosted on reputable cloud providers with network isolation, encrypted databases, and automated backups. Secrets managed via environment configuration, not source code.

Fraud prevention

Fake order signals, velocity checks, and integration anomaly detection help protect merchant operations.

Reporting vulnerabilities

Responsible disclosure: contact@ecomsolvebd.com. Please include reproduction steps. We do not support unsolicited scanning of production without permission.