Security is part of every site we build and host. This page summarises the controls we apply by default. It is a plain-language overview, not a contractual commitment.
Transport & Browser Protections
- HTTPS is enforced on every page, with HTTP Strict Transport Security enabled.
- A Content Security Policy restricts which scripts, styles, and fonts the browser is allowed to load.
- Clickjacking, MIME-sniffing, and referrer-leak protections are set on every response.
- Camera, microphone, and geolocation access are disabled site-wide.
Form & Input Security
- Every form is validated in the browser and again on the server.
- Submitted values are escaped before being rendered anywhere.
- Contact and quote endpoints are rate limited to block automated abuse.
- Hidden honeypot fields silently discard bot submissions.
Credentials & Access
- No secrets, API keys, or credentials are stored in site code.
- Server-side keys are held in the hosting environment and never exposed to the browser.
- Administrative access is limited to WebLynx Solution staff who need it.
Availability & Monitoring
- Sites are hosted on a globally distributed edge network.
- Application errors are captured server-side; stack traces are never shown to visitors.
- Client sites are backed up and can be restored from a previous deployment.
Reporting a Vulnerability
If you believe you have found a security issue on this site or on a site we host, email info@weblynxsolution.com with the details. We review every report and will confirm receipt.