The website is hosted on a hardened server, behind HTTPS, with regular patching and backups. Uploads by the public are stored outside the public web root and served only to authorised users. Security audit by a CERT-In empanelled auditor is part of the launch plan.