Security

Todo

  • OWASP

  • Security Requirements by banking providers?

  • Audits needed? Ex: Unit Ensure security policies, XSS prevention, disable Iframe Embedding,

  • Referrer policy

  • IP Blocking - some regulation require US only, checking for VPN, fraud detection

  • Fraud Handling - closing accounts, suspending accounts, refunds, freezing assets

  • Dependency auditing - Snyk Have external security audit

  • Make sure you are following regulations and compartmentalization for Prod data, even logging HTTPs, HTTP redirect

PreviousBackend IntegrationNextDevOps

Last updated