ABT Dev Services treats security as part of product design, delivery and operation. This page explains the safeguards visible in our public website, how to report a problem, and how project-specific security requirements are agreed.
Public website safeguards
The website configures security response headers, including a content security policy, frame protection, content-type protection, a referrer policy and restrictions on browser permissions. Contact, newsletter and application submissions are validated on the server and include a hidden field, timing check and a basic request limit that deter some automated abuse. The request limit is held in server memory and may not coordinate across multiple host instances; these controls are not a substitute for infrastructure-level abuse protection or a security audit. Email delivery uses authenticated SMTP with transport encryption when configured. Do not send secrets or sensitive records through a general form.
Accounts and access
The client portal is being updated. Its public sign-in and sign-up routes currently show a maintenance notice and accept no credentials. Do not send passwords by email or general inquiry. The future portal will require authentication and access controls before it handles client information.
Handling project information
Security needs differ across healthcare, education, finance, commerce and other projects. During discovery, we ask clients to identify data classifications, access needs, hosting location, retention expectations and applicable standards before designing a solution. Share sanitized examples in early discussions. A signed engagement sets any project-specific confidentiality, security, incident, subcontractor and compliance commitments.
Working with suppliers
The public website depends on its hosting environment; ordinary email and phone services handle direct correspondence. Project delivery may involve additional cloud, software or specialist suppliers selected for the agreed scope. We identify material supplier requirements and responsibilities in the relevant engagement rather than treating a public website policy as a universal guarantee for every project.
Reporting a vulnerability
If you believe you have found a security issue affecting this website, email contact@abtdevservices.com with the affected URL, a concise description, potential impact and safe steps to reproduce it. Do not access another person’s information, alter records, disrupt service, run high-volume scans or publish details before we have had a reasonable opportunity to investigate. We will assess credible reports and coordinate a responsible resolution. This reporting channel is not a promise of a reward program.
Incident response
If we become aware of a suspected issue, we assess its scope and impact, take appropriate containment and correction steps, and consider notifications required by applicable law or a client agreement. The response depends on the systems and information involved; this page does not establish a project-specific service level.
Questions
Prospective clients can ask about a proposed project’s security architecture, deployment, data handling and support during discovery. Contact contact@abtdevservices.com to begin that conversation.