Security
My HQ is designed as a private dashboard prototype with secure defaults in mind, but the current implementation is intentionally limited compared with a full production security stack.
Identity and access
Planned auth flows include secure session handling, verified email checks, password recovery, and sign-out controls across devices. The exact provider and implementation are still part of the production roadmap.
Application safeguards
The architecture calls for strict input validation, rate limiting, content sanitization, and secure cookie settings. These controls are planned and will be verified as the product matures.
Responsible disclosure
If you discover a security issue, please email hello@my-hq.app and include a clear description of the vulnerability, the affected flow, and any relevant reproduction steps.