Elite Epoxy
Website Security
A brief overview of how the site handles form submissions and operational security.
Form Handling
Website forms are sent to a dedicated backend API over HTTPS. Requests are size limited, validated, rate limited, and escaped before email content is created.
Access
API keys and email configuration are kept in backend environment variables rather than frontend code or public files. The public website is served with restrictive browser security headers.
Maintenance
Automated tests and dependency audits are part of the project checks. No website can promise perfect security, so the application and its providers still require routine monitoring and updates.
