Security Guidelines¶

Security best practices for Arctyk ITSM development.

Key Principles¶

1. Never commit secrets
2. Validate all user input
3. Use parameterized queries
4. Enable HTTPS in production
5. Keep dependencies updated

Common Vulnerabilities¶

• SQL Injection - Use Django ORM
• XSS - Use template auto-escaping
• CSRF - Include CSRF tokens
• Authentication - Use Django auth

Related Documentation¶

• Authentication & Authorization
• Deployment Security