Application Security
Network Security
HSTS
app.euler.finance returns an HTTP Strict Transport Security (HSTS) header, which instructs supporting browsers to use HTTPS for the origin.
DNSSEC
euler.finance publishes a DNSSEC delegation record, enabling resolvers to validate signed DNS data for the zone.
DDoS Protection
app.euler.finance is served through Cloudflare's edge network. Cloudflare provides DDoS protection for applications proxied through its network.
Application Layer Security
Content Security Policy (CSP)
app.euler.finance returns a Content Security Policy (CSP) that restricts permitted resource origins and script execution. CSP can reduce risk from some content-injection attacks, including cross-site scripting.
Email Security
euler.finance and euler.xyz publish SPF and DMARC records. These records help receiving mail systems evaluate authorized senders and specify how authentication failures should be handled.
Further Security Resources
- See Euler Protocol audits for component-specific security reviews.
- See the Bug Bounty Program to report a vulnerability.