Tenant isolation
Organization, workspace, and site membership checks are enforced server-side on protected resources and mutations.
Autonomy is useful only when boundaries hold.
Rankelo can only do useful growth work on your site if you can trust where it stops. It combines tenant-scoped authorization, encrypted integration credentials, guarded crawling, explicit approvals, idempotent workers, and audit records. External provider readiness remains separate from application correctness.
Session protection
Server-side sessions use HttpOnly cookies, CSRF tokens, origin controls, expiry, revocation, and rate limits.
Credential handling
Provider secrets are encrypted at rest with a separate runtime key and are not returned through product APIs.
Safe crawling
Private networks, metadata services, unsafe redirects, URL credentials, DNS rebinding patterns, size limits, and timeouts are guarded.
Governed actions
Approval state, before and after values, provider responses, affected resources, and rollback records are persisted.
Reliable background work
Jobs use atomic claims, idempotency keys, bounded retries, stale recovery, and per-type concurrency controls.
Payment security
Entitlements follow verified events.
Paid checkout is not live during early access. The billing adapter runs in test mode only, and a checkout or client confirmation cannot grant access by itself. Signed webhooks, event idempotency, event ordering, and terminal states control paid entitlements.
Current boundary
No card is collected on this site today.
The free analysis and early-access workspace do not take payment. Paid activation will use the same verified-event contract when checkout goes live.
Operational controls
Designed for a real deployment, not a local-only demo.
PostgreSQL primary runtime
Migration checks, transaction rollback, row-level claim safety, and production smoke tests.
Readiness separation
Liveness, migration state, worker heartbeat, and external credential state can be evaluated independently.
Backup and restore runbook
Deployment readiness requires a verified dump and restore against an isolated database.
Responsible disclosure
View service statusFound a security concern?
Email contact@brandsap.com with the subject "Security". Do not include credentials or sensitive customer data in a report.