PortMend

Security Overview

October 2026

Tenant isolation

Operational records are scoped by tenant identifiers and direct-object access is tested to prevent one customer from reading another customer's records.

Authentication and sessions

Passwords are hashed. Production sessions use HttpOnly and SameSite cookies, secure-cookie enforcement, bounded session lifetime and security response headers.

Integrity and recovery

Production readiness includes database connectivity and integrity checks. Backup tooling verifies SQLite integrity, creates safety copies before restore, and applies a configurable backup-retention policy with a 30-day production default.

Operational security

Production deployment uses a dedicated application service, dedicated data path, environment-managed secrets, reverse proxy and HTTPS configuration separate from other PrimeCast systems.