At MockBoost, security is not an afterthought—it's built into every layer of our infrastructure. We employ industry-standard security practices and continuously monitor for threats to ensure your data remains protected.
Data Encryption
Encryption in Transit
All data transmitted between your browser and our servers is encrypted using TLS 1.3 (Transport Layer Security). This ensures that:
Your API requests and responses are protected from interception
Session tokens cannot be stolen in transit
Man-in-the-middle attacks are prevented
Encryption at Rest
All data stored in our databases is encrypted at rest using AES-256 encryption:
Mock data and endpoint configurations
User credentials (hashed with bcrypt)
Workspace information
API logs and request history
Access Control
Authentication
Secure Password Hashing: Passwords are hashed using bcrypt with a cost factor of 12
Session Management: Secure, HTTP-only cookies with strict same-site policies
Token-based Auth: JWT tokens for API authentication with short expiration times
Authorization
Role-Based Access Control (RBAC): Users can be assigned roles (OWNER, ADMIN, MEMBER)
Workspace Isolation: Data is strictly isolated between workspaces
Least Privilege Principle: Users only have access to resources they need
Database Security
PostgreSQL: Enterprise-grade database with advanced security features
Connection Pooling: Secure connection management with Prisma