Security
Security measures and best practices
Security First: FeedOracle implements industry-standard security headers and TLS 1.2+.
Security Headers
| Header | Status |
|---|
Strict-Transport-Security (HSTS) | ✓ |
X-Frame-Options | ✓ |
X-Content-Type-Options | ✓ |
X-XSS-Protection | ✓ |
Referrer-Policy | ✓ |
Permissions-Policy | ✓ |
Content-Security-Policy | ✓ |
Transport Security
- ✓ TLS 1.2+ required
- ✓ HTTPS enforced (HTTP redirects)
- ✓ HSTS preload enabled
- ✓ Modern cipher suites only
API Security
- ✓ Bearer token authentication
- ✓ Rate limiting per API key
- ✓ Request ID tracking
- ✓ IP-based throttling
Data Protection
- ✓ GDPR compliant
- ✓ Data residency: Germany/EU
- ✓ No data transfer outside EU
- ✓ Encrypted at rest and in transit
Infrastructure
- ✓ Hosted in Germany (Contabo DE)
- ✓ Cloudflare DDoS protection
- ✓ Automated security updates
- ✓ Daily encrypted backups
Vulnerability Reporting
Found a security issue? Contact us:
Verify Headers
Test our security headers yourself:
curl -I https://feedoracle.io/