Trust & Safety

Security Statement

We take the security of your data, intellectual property, and project information seriously. Here is how we protect you.

Our Security Practices

NDA Before Every Engagement

We sign a Non-Disclosure Agreement before any technical discussion begins. Your idea, architecture, and business data remain fully confidential at every stage.

Full IP Ownership to You

All source code, designs, and intellectual property created during your engagement belong entirely to you. No licensing fees, no lock-in, no strings attached.

Secure Development Practices

We follow OWASP Top 10 guidelines, conduct input validation on all endpoints, use parameterised queries to prevent SQL injection, and apply security headers on every deployment.

Infrastructure Security

All production deployments use HTTPS (TLS 1.2+), HSTS, environment variable isolation, and follow the principle of least privilege for all service accounts and IAM roles.

Transparent Processes

You have visibility into every stage of your project — code repositories, deployment pipelines, staging environments, and progress dashboards are shared with you throughout.

Vulnerability Disclosure

If you discover a security issue with our website or any deliverable, please contact us immediately. We commit to acknowledging reports within 24 hours and resolving critical issues within 72 hours.

HTTP Security Headers

All pages served by khulbenexus.com include the following security headers:

Header	Status	Note
Strict-Transport-Security	✅	HSTS with 2-year max-age + preload
X-Frame-Options	✅	DENY — prevents clickjacking
X-Content-Type-Options	✅	nosniff
Referrer-Policy	✅	strict-origin-when-cross-origin
Permissions-Policy	✅	camera, mic, geolocation disabled
Content-Security-Policy	✅	Restricts script, style, and frame sources

Report a Security Issue

Found a vulnerability on our website or in a deliverable? Please contact us immediately. We take all reports seriously and respond within 24 hours.

hello@khulbenexus.com