Security
How Outprice protects your data and your account.
- Encrypted everywhere. The API is served over HTTPS only, with HSTS. Connections from the API to its database are encrypted too.
- Keys are hashed. Only a hash of each API key and session is stored, so a copy of the database does not hand out working keys.
- Accounts are isolated. Every request is limited to the key’s own
account. Another account’s record answers
404, never its data. - Abuse protection. Wrong keys and passwords are rate-limited, and addresses that keep trying are blocked.
- No price changes. The API suggests prices; it never changes yours.
Reporting a vulnerability
Please write to info@getoutprice.com with the details. We reply quickly and do not take action against good-faith research.