Security

The portal uses Argon2id authentication, opaque server-side sessions, CSRF and origin protection, least-privilege database access, audit events, TLS headers, and data isolation.