Do not paste secrets in chat
Store sensitive information in backend environment variables or a secrets manager, and access it through functions.Least privilege and environment isolation
Separate production / staging / development; use roles and tokens as needed to avoid broad privileges.Dependencies and build security
Upgrade dependencies regularly and enable SCA/CI scanning; avoid bundling large secrets or certificates into the frontend.API and data security
All public endpoints must enforce authentication and rate limiting; validate inputs and file uploads; protect PII and privacy data.Pre-release checks
Before publish, run an automated checklist: secret leaks, debug flags, error logging, CORS policy, and more.superun website
Learn more about product features and examples.