Enterprise-Grade Protection
We believe security is a feature, not a checklist. FluxPort is designed from the database-up to protect your secrets and API configurations.
Secret Sanitization
Automatic redacting of passwords and keys in dashboard logs and exports.
Strict Validation
Every endpoint is guarded by Express-level `express-validator` and JWT checks.
Visibility Control
Full audit trails of who created, edited, or deleted any request within a workspace.
Security Roadmap
JWT Authentication
ImplementedSecure token-based user verification with automated refresh logic.
Workspace Isolation
ImplementedNo data leakage across multi-tenant workspaces via DB-level checks.
RBAC (Role Controls)
In ProgressGranular access for viewers, editors, and admins within a team.
SAML / SSO
PlannedEnterprise login support for Okta, Azure AD, and Google Workspace.
Zero-Trust Proxy
PlannedMutual TLS (mTLS) support for internal relay secure segments.
"Our infrastructure is designed to isolate data at the row level using PostgreSQL security policies, ensuring that enterprise clients can trust us with their internal API structures."
Found a vulnerability?
We provide bounties for responsibly disclosed security issues. Please email security@fluxport.org