Transport and hosting
The production website is delivered over HTTPS through its hosting platform.
Security
Security is part of the engineering work.
This page describes our security approach and the public corporate website baseline. Product-specific controls depend on the product, deployment and customer agreement; we do not imply certifications or controls that have not been explicitly established.
01 / Corporate website
Browser protections
The site is configured with content-type, referrer and permissions policies and explicit search-engine directives.
Input validation
Business-enquiry inputs are validated by the application before accepted processing.
Search boundaries
Application API routes are excluded from search indexing and invalid public routes return a real 404 response.
02 / Product engineering
The required security controls follow the risk and the data—not a one-size-fits-all checklist.
For business systems, we design around explicit identity, roles, tenant or organisation boundaries where relevant, server-side authorization, auditable actions, controlled integrations, validation and failure handling.
For AI-assisted workflows, we prefer bounded tasks, structured outputs, validation and human review where an incorrect action could materially affect a person, transaction or business process.
03 / Reporting
Responsible disclosure starts with a clear report.
If you believe you have found a security issue, email contact@xzbytecore.com with the affected URL or product, what you observed, steps to reproduce and the potential impact. Please avoid accessing data that is not yours, disrupting availability or sending secrets in the report.
No certification claim by implication.
Security practices and certifications are different things. Unless a certification is explicitly published by XZ BYTECORE for a specific scope, this page should not be read as claiming one.
XZ BYTECORE
Have a security concern.
For a security issue involving this website or an XZ BYTECORE system, send enough detail for us to understand and reproduce the concern. Do not include unnecessary sensitive data.
Start a conversation