Security
Stone Vision uses authenticated access, server-side validation for generation/export/billing routes, and signature verification for billing webhooks.
- Only signed-in users can use the application workflow.
- Input payload sizes are validated and bounded on API routes.
- Billing webhooks are signature-verified before account changes are applied.
FAQ
How is billing integrity protected? Billing webhooks are signature-verified before account metadata is updated.
How do you handle vulnerability reports? We accept responsible disclosure reports at hello@stonevision.pl and investigate reports in a risk-based order.
Report security concerns to: hello@stonevision.pl