SECURITY & INFRASTRUCTURE

CURRENT HOSTING

Clearance (cl.alfanestlabs.com) is currently hosted on shared hosting. Database: MySQL. SSL/TLS is provided via the hosting provider (Let's Encrypt).

Planned: migration to a dedicated VPS and, after revenue allows, a second VPS for failover. Backup and disaster recovery procedures will be documented and implemented post-migration.

VENDORS & DEPENDENCIES

• Hosting: Current provider (shared). Migration to VPS planned.
• Bot protection: Cloudflare Turnstile (forms).
• Payment: Stripe (card) and crypto (on-chain verification).
• Blockchain data: Alchemy (or equivalent) for payment verification.

Vendor SLAs and fallback options will be documented after infrastructure migration.

SECURITY MEASURES IN PLACE

• Passwords hashed (bcrypt). Session tokens hashed (SHA-256), 7-day expiry.
• Login rate limiting: 5 failed attempts = 15 min block. Turnstile required after 3 failures.
• Input validation and parameterized queries. No raw user input in SQL.
• HTTPS only. No sensitive data in client-side storage.

INCIDENT RESPONSE & BACKUP

Incident response plan and backup/disaster recovery procedures are in documentation phase. Automated backups and DR testing are planned after migration to VPS.