Enterprise Trust & Integrity
Security Architecture & Data Protection
We engineered SSL Monitor by Cod Xpert around the principle of zero trust and strict data minimization. Here is how we safeguard your digital assets and privacy.
Zero Private Keys Policy
We never request, handle, or store private encryption keys, SSH certificates, or server administrative credentials. Monitoring is conducted strictly via standard public TLS client handshakes on port 443, reading only the public certificate data that any browser receives.
✓ Public handshake only
✓ Zero credentials needed
Multi-Tenant Row-Level Isolation
Every user's dashboard is completely isolated at the database query level. Custom Eloquent scopes and strict authorization policies guarantee that no user can view, edit, or delete another organization's monitored domains or client records.
✓ Multi-tenant scoping
✓ Strict authorization
DPDP Act 2023 Compliance
Operating under India's Digital Personal Data Protection Act, 2023, Cod Xpert adheres to full data fiduciary standards. We process personal data solely for specified operational monitoring, provide full data principal rights, and enforce immediate data erasure upon account deletion.
✓ Consent-based processing
✓ Data minimization
SSRF Defense & Safe Probing
Our background workers and public tools employ strict Server-Side Request Forgery (SSRF) filters. IP resolution algorithms validate every domain against RFC 1918 private subnets, loopback interfaces (127.0.0.1), and link-local ranges before initiating connections.
✓ RFC 1918 blocked
✓ DNS validation
Admin Approval & Fraud Prevention
To eliminate spam, automated bot abuse, and malicious recon, all new user registrations require human administrator approval before access is granted. This ensures our outbound SMTP reputation remains spotless and email alerts land directly in inboxes.
✓ Zero spam accounts
✓ High deliverability
Encrypted Communications & CSRF
All traffic between your browser and SSL Monitor is encrypted using modern TLS cipher suites. Every state-modifying POST, PUT, and DELETE route is guarded by cryptographically secure CSRF tokens and rate limiting throttles.
✓ TLS 1.3 enforced
✓ Anti-CSRF protection