Architecture principles
Separate public marketing, future authenticated platform, legacy Backup and secret configuration boundaries.
Security at Devnora
A public commitment, not a certification claim
Website controls
Server-side validation, CSRF protection, honeypot and rate limiting, restrictive headers, output escaping and an allowlisted release build.
Product truth
Every advanced module carries a readiness label. Devnora does not claim an operational SOC, certification, kernel protection or production detection coverage without evidence.
Data principles
Minimise collection, make access explicit, retain provenance and design tenant boundaries before platform launch.
Supply chain
The corporate website uses no third-party runtime JavaScript package. A CycloneDX SBOM and third-party notices are generated with each reviewed release.
Report an issue
Use the responsible disclosure page. Do not include sensitive data in an initial website form.