Controls
- HTTPS/TLS in transit
- LinkedIn OAuth instead of password collection
- Server-side Razorpay signature and payment verification
- Managed Firebase and Vercel infrastructure
Responsible disclosure
Report a suspected vulnerability to mrcoder8104@gmail.com and avoid accessing other users’ data.