Security Architecture & Vulnerability Disclosure

1. Security Architecture Ruhanir IT incorporates defense-in-depth principles across every infrastructure layer: - **Edge Security**: Cloudflare edge DDoS mitigation, TLS 1.3 encryption, and Turnstile automated bot deterrence. - **Application Security**: Strict Zod schema validation on all incoming payloads; parameterized database queries to prevent injection attacks. - **Database Boundary**: Authenticated session controls and tenant-scoped query execution. - **Access Control**: Role-Based Access Control (RBAC) governing staff privileges within each portal.

2. Responsible Vulnerability Disclosure We welcome responsible security research. If you discover a vulnerability: 1. Please report it immediately to **support@ruhanir.com**. 2. Provide reproducible proof-of-concept steps. 3. Allow us a reasonable response window (at least 7 business days) before disclosing details publicly. 4. Do not perform actions that degrade service availability or compromise client data.