Separated deployments
The public marketing website and individual NextCog applications are deployed as separate systems with different responsibilities.
Security
Security is part of the operating model.
NextCog applies proportionate technical and organizational safeguards to its public website and develops each product as a separate system with its own controls.
Protected communications
HTTPS protects data in transit. The contact form uses Cloudflare Turnstile, request validation, rate limiting, and a loopback-only application service.
Controlled access
Administrative access should follow least-privilege principles, use protected credentials, and be limited to people who need it.
Ongoing maintenance
Dependencies should be reviewed and updated as part of normal maintenance, with quality and build checks run before deployment.
Security
Report a security concern
If you believe you have found a security issue affecting this website, contact NextCog with enough detail to investigate it safely. Do not include active credentials or unnecessary personal data.
Contact NextCog