Public-site controls
Server-side validation, CSRF protection, throttling, safe output handling and security headers protect public interactions.
Trust by design
Security is a requirement, not a slogan.
Kataboom is being designed with layered controls for public forms, authenticated workflows and sensitive commercial information.
Assessment data
Guest assessments use high-entropy private resume tokens stored only as one-way hashes, UUID records, no-index/no-store responses, versioned calculations, immutable result snapshots and automated retention. Claiming a guest assessment revokes anonymous bearer access and requires the verified owning account. Account routes scope every assessment to the authenticated customer.
Responsible claims
Specific certifications, uptime targets and completed platform controls will only be published after verification.
Last updated: November 2026