https://smartcontractauditor.ai/assets/security-Cv44jLL6.js

1import{c as t,j as e,aM as a,aQ as r,L as i,S as n,aw as c,x as s,aq as l}from"./index-DJZuVyTC.js";import{A as d}from"./arrow-left-T0E6zDbk.js";import{K as o}from"./key-Co_qV10H.js";import{T as x}from"./triangle-alert-CEWMGGTe.js";/**
2 * @license lucide-react v0.453.0 - ISC
3 *
4 * This source code is licensed under the ISC license.
5 * See the LICENSE file in the root directory of this source tree.
6 */const m=t("Server",[["rect",{width:"20",height:"8",x:"2",y:"2",rx:"2",ry:"2",key:"ngkwjq"}],["rect",{width:"20",height:"8",x:"2",y:"14",rx:"2",ry:"2",key:"iecqi9"}],["line",{x1:"6",x2:"6.01",y1:"6",y2:"6",key:"16zg32"}],["line",{x1:"6",x2:"6.01",y1:"18",y2:"18",key:"nzw8ys"}]]);function g(){return e.jsxs(e.Fragment,{children:[e.jsx(a,{title:"Security | SmartContractAuditor.ai",description:"Learn about SmartContractAuditor.ai's comprehensive security measures protecting your smart contract code and personal data.",canonicalUrl:"https://smartcontractauditor.ai/security"}),e.jsxs("div",{className:"min-h-screen bg-[#0a0b14]",children:[e.jsx(r,{}),e.jsxs("div",{className:"container mx-auto px-4 py-8 max-w-4xl",children:[e.jsxs(i,{href:"/",className:"inline-flex items-center text-gray-400 hover:text-white transition-colors mb-8","data-testid":"link-back-home",children:[e.jsx(d,{className:"w-4 h-4 mr-2"}),"Back to Home"]}),e.jsxs("div",{className:"glass-card rounded-2xl p-8 md:p-12 border border-white/10 bg-white/5 backdrop-blur-xl",children:[e.jsxs("div",{className:"flex items-center gap-3 mb-6",children:[e.jsx("div",{className:"p-3 rounded-xl bg-cyan-500/20 border border-cyan-500/30",children:e.jsx(n,{className:"w-6 h-6 text-cyan-400"})}),e.jsxs("div",{children:[e.jsx("h1",{className:"text-3xl md:text-4xl font-bold text-white","data-testid":"text-page-title",children:"Security"}),e.jsxs("p",{className:"text-gray-400 text-sm mt-1",children:["Last updated: ","October 3, 2026"]})]})]}),e.jsxs("div",{className:"prose prose-invert max-w-none space-y-8",children:[e.jsx("section",{children:e.jsx("p",{className:"text-gray-300 leading-relaxed text-lg",children:"At SmartContractAuditor.ai, security is at the core of everything we do. As a platform dedicated to identifying vulnerabilities in smart contracts, we hold ourselves to the highest security standards to protect your code and data."})}),e.jsxs("section",{children:[e.jsxs("h2",{className:"text-xl font-semibold text-white flex items-center gap-2 mb-4",children:[e.jsx(c,{className:"w-5 h-5 text-cyan-400"}),"Data Encryption"]}),e.jsxs("div",{className:"grid md:grid-cols-2 gap-4",children:[e.jsxs("div",{className:"bg-cyan-500/10 border border-cyan-500/30 rounded-xl p-4",children:[e.jsxs("div",{className:"flex items-center gap-2 mb-2",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400"}),e.jsx("h3",{className:"font-medium text-white",children:"In Transit"})]}),e.jsx("p",{className:"text-gray-300 text-sm",children:"All data transmitted between your browser and our servers is encrypted using TLS 1.3 with strong cipher suites."})]}),e.jsxs("div",{className:"bg-cyan-500/10 border border-cyan-500/30 rounded-xl p-4",children:[e.jsxs("div",{className:"flex items-center gap-2 mb-2",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400"}),e.jsx("h3",{className:"font-medium text-white",children:"At Rest"})]}),e.jsx("p",{className:"text-gray-300 text-sm",children:"Sensitive data stored in our databases is encrypted using AES-256 encryption, the industry standard for data protection."})]})]})]}),e.jsxs("section",{children:[e.jsxs("h2",{className:"text-xl font-semibold text-white flex items-center gap-2 mb-4",children:[e.jsx(o,{className:"w-5 h-5 text-cyan-400"}),"Authentication & Access Control"]}),e.jsxs("ul",{className:"space-y-3",children:[e.jsxs("li",{className:"flex items-start gap-3",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400 mt-0.5 flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"text-white font-medium",children:"Secure Password Storage"}),e.jsx("p",{className:"text-gray-300 text-sm",children:"Passwords are hashed using bcrypt with strong work factors, making them impossible to reverse."})]})]}),e.jsxs("li",{className:"flex items-start gap-3",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400 mt-0.5 flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"text-white font-medium",children:"JWT Token Authentication"}),e.jsx("p",{className:"text-gray-300 text-sm",children:"Secure, time-limited tokens are used for session management with automatic expiration."})]})]}),e.jsxs("li",{className:"flex items-start gap-3",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400 mt-0.5 flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"text-white font-medium",children:"API Key Security"}),e.jsx("p",{className:"text-gray-300 text-sm",children:"API keys for IDE integrations are securely generated and can be rotated at any time."})]})]}),e.jsxs("li",{className:"flex items-start gap-3",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400 mt-0.5 flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"text-white font-medium",children:"Role-Based Access Control"}),e.jsx("p",{className:"text-gray-300 text-sm",children:"Fine-grained permissions ensure users only access what they're authorized to see."})]})]})]})]}),e.jsxs("section",{children:[e.jsxs("h2",{className:"text-xl font-semibold text-white flex items-center gap-2 mb-4",children:[e.jsx(m,{className:"w-5 h-5 text-cyan-400"}

6),"Infrastructure Security"]}),e.jsxs("ul",{className:"space-y-3",children:[e.jsxs("li",{className:"flex items-start gap-3",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400 mt-0.5 flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"text-white font-medium",children:"Secure Hosting"}),e.jsx("p",{className:"text-gray-300 text-sm",children:"Our infrastructure runs on Vercel and Neon, both of which hold SOC 2 Type II certifications as vendors."})]})]}),e.jsxs("li",{className:"flex items-start gap-3",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400 mt-0.5 flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"text-white font-medium",children:"Rate Limiting"}),e.jsx("p",{className:"text-gray-300 text-sm",children:"Aggressive rate limiting protects against brute-force attacks and API abuse."})]})]}),e.jsxs("li",{className:"flex items-start gap-3",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400 mt-0.5 flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"text-white font-medium",children:"Security Headers"}),e.jsx("p",{className:"text-gray-300 text-sm",children:"HSTS, a Content-Security-Policy that blocks framing by unapproved sites, plugins, and base-URI tampering, plus MIME-sniffing, referrer, and permissions policies."})]})]}),e.jsxs("li",{className:"flex items-start gap-3",children:[e.jsx(s,{className:"w-5 h-5 text-cyan-400 mt-0.5 flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"text-white font-medium",children:"DDoS Protection"}),e.jsx("p",{className:"text-gray-300 text-sm",children:"Built-in protection against distributed denial-of-service attacks."})]})]})]})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-xl font-semibold text-white mb-4",children:"Code Security"}),e.jsxs("div",{className:"bg-gradient-to-r from-cyan-500/10 to-indigo-500/10 border border-cyan-500/30 rounded-xl p-6",children:[e.jsx("h3",{className:"text-white font-medium mb-3",children:"How We Handle Your Smart Contracts"}),e.jsxs("ul",{className:"space-y-2 text-gray-300",children:[e.jsxs("li",{className:"flex items-center gap-2",children:[e.jsx(s,{className:"w-4 h-4 text-cyan-400"}),"Code is transmitted securely over HTTPS"]}),e.jsxs("li",{className:"flex items-center gap-2",children:[e.jsx(s,{className:"w-4 h-4 text-cyan-400"}),"Free scans (no account) run on our own pattern engine and the code is not saved"]}),e.jsxs("li",{className:"flex items-center gap-2",children:[e.jsx(s,{className:"w-4 h-4 text-cyan-400"}),"Signed-in scans are saved to your private history so you can reopen reports"]}),e.jsxs("li",{className:"flex items-center gap-2",children:[e.jsx(s,{className:"w-4 h-4 text-cyan-400"}),"Pro deep analysis sends code to Anthropic's API, which does not train on API data by default"]}),e.jsxs("li",{className:"flex items-center gap-2",children:[e.jsx(s,{className:"w-4 h-4 text-cyan-400"}),"Delete any scan, or your entire history, from the History tab at any time"]})]})]})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-xl font-semibold text-white mb-4",children:"Payment Security"}),e.jsxs("p",{className:"text-gray-300 leading-relaxed",children:["All payment processing is handled by ",e.jsx("strong",{className:"text-white",children:"Stripe"}),", a PCI-DSS Level 1 certified payment processor. We never store your credit card details on our servers. Stripe uses industry-leading security measures including tokenization and encryption to protect your payment information."]})]}),e.jsxs("section",{children:[e.jsxs("h2",{className:"text-xl font-semibold text-white flex items-center gap-2 mb-4",children:[e.jsx(x,{className:"w-5 h-5 text-amber-400"}),"Vulnerability Disclosure"]}),e.jsx("p",{className:"text-gray-300 leading-relaxed mb-4",children:"We take security vulnerabilities seriously. If you discover a security issue in our platform, please report it responsibly."}),e.jsxs("div",{className:"bg-amber-500/10 border border-amber-500/30 rounded-xl p-4",children:[e.jsx("h3",{className:"text-amber-200 font-medium mb-2",children:"Responsible Disclosure Policy"}),e.jsxs("ul",{className:"text-gray-300 text-sm space-y-1",children:[e.jsx("li",{children:"• Report vulnerabilities to [email protected]"}),e.jsx("li",{children:"• Allow reasonable time for us to address the issue"}),e.jsx("li",{children:"• Do not exploit the vulnerability or access user data"}),e.jsx("li",{children:"• We will acknowledge your report within 48 hours"})]})]})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-xl font-semibold text-white mb-4",children:"Compliance"}),e.jsx("p",{className:"text-gray-300 leading-relaxed",children:"We're a small team and take privacy seriously, though we haven't undergone a formal third-party compliance audit yet. Here's what we actually do:"}),e.jsxs("ul",{className:"list-disc list-inside text-gray-300 mt-3 space-y-2",children:[e.jsxs("li",{children:["Built with GDPR and CCPA principles in mind — see our ",e.jsx("a",{href:"/privacy",className:"text-cyan-400 hover:text-cyan-300 underline",children:"Privacy Policy"}

6)," for exactly what we collect and how to request deletion"]}),e.jsx("li",{children:"Data encrypted in transit and at rest (see Infrastructure Security above)"}),e.jsx("li",{children:"A responsible disclosure process for reporting security issues (see below)"})]})]}),e.jsxs("section",{children:[e.jsxs("h2",{className:"text-xl font-semibold text-white flex items-center gap-2 mb-4",children:[e.jsx(l,{className:"w-5 h-5 text-cyan-400"}),"Security Contact"]}),e.jsx("p",{className:"text-gray-300 leading-relaxed",children:"For security-related inquiries or to report a vulnerability:"}),e.jsx("div",{className:"mt-4 p-4 bg-cyan-500/10 border border-cyan-500/30 rounded-xl",children:e.jsxs("p",{className:"text-cyan-300",children:["Email: ",e.jsx("a",{href:"mailto:[email protected]",className:"text-cyan-400 hover:text-cyan-300 underline","data-testid":"link-email-security",children:"[email protected]"})]})})]})]})]}),e.jsx("div",{className:"mt-8 text-center text-gray-500 text-sm",children:e.jsxs("p",{children:["© ",new Date().getFullYear()," SmartContractAuditor.ai. All rights reserved."]})})]})]})]})}export{g as default};