Security
An overview of how Nix Inside approaches security for this website and client engagements. This is a sample document for a demonstration website.
Last updated: September 2026
Website security
The site is served over HTTPS with modern TLS, uses a strict content model for third-party resources, and does not expose API keys in client code.
Tool data handling
Tools that can run locally do so entirely in your browser — the text and files you enter are never uploaded.
Data-dependent tools call server-side abstractions; any third-party API keys are held only on the server and never shipped to the browser.
We never present demo data as a live API response.
Client engagements
Access to client systems is granted on a least-privilege basis and revoked at the end of an engagement.
Credentials are stored in a dedicated secrets manager, never in documents or code.
We follow SEO-safe change management: staged deploys, backups and rollback plans for technical work.
Reporting a vulnerability
If you believe you have found a security issue with this site, email security@nixinside.com with details. We appreciate responsible disclosure.