Security & trust

Protection is a practice.
Not a promise.

Layered controls, measurable checks and clear limitations. No website can be guaranteed impossible to compromise.

01

Application firewall

Bounded request parsing, origin validation and abuse limits defend sensitive application endpoints.

02

Private by design

The vendor portal remains owner-only. Public product information does not open evaluations or licence issuing.

03

Credentials stay server-side

API keys belong in protected runtime settings. They do not belong in public JavaScript or downloadable packages.

04

Human release authority

An AI assistant may explain or draft. It cannot approve packages, broaden access or publish an evaluation.

Red AI Defender

How Red AI Defender checks the site

Red AI Defender inspected selected firewall source files. The inspection covered those files only.

The website checks requests at its public endpoints. Vendor evaluations and release decisions stay in the private portal.