Security

How we protect venues, crews and their files

• Encryption in transit: TLS 1.2/1.3 only, HSTS, modern ciphers.
• Passwords: Argon2id hashing; optional two-step sign-in with any authenticator app; repeated failed sign-ins are throttled and blocked.
• Files: every upload is virus-scanned before anyone can open it; files live outside the website under random names and are delivered only after a permission check; previews are generated on our servers.
• Browser protections: a strict Content Security Policy (no third-party scripts at all), clickjacking protection, CSRF tokens on every form.
• Privacy by design: fonts, maps and scripts are served from techpack.live itself, so your browser never talks to third parties while you use the site.
• Accountability: administrative actions are logged; access to accounts and content is limited to support and abuse handling.
• Backups: nightly, with 14 days of history.

Report a vulnerability

Email support@techpack.live with the details. Please give us a reasonable time to fix it before telling others, don't access data that isn't yours, and don't degrade the service. We'll respond quickly and credit you if you'd like.