Security Practices

Last Updated: June 2026 Version: 1.0.0

ReReal utilizes industrial-grade measures to secure your resumes and account credentials.

1. Authentication

• Secure Sessions: Sessions are authenticated server-side using secure cookies.
• Middleware Guards: Every request to settings, dashboard, or editor endpoints is validated server-side to prevent unauthorized access.

2. Encryption

• Transit: HTTPS/TLS 1.3 is enforced globally to encrypt traffic between your browser and our servers.
• At Rest: Database fields and hosting assets are encrypted at rest using industry-standard AES-256 encryption.

3. Threat Mitigation

• Rate Limiting: IP-based global rate limiters and access controls prevent DDoS attacks and system exploitation.
• CSRF Safeguards: Mutations to our APIs verify headers to prevent cross-site request forgery.
• Input Validation: Strict validation schemas sanitize all incoming data payloads to block injection attacks.