Access control
Dashboard pages require authenticated sessions. Admin access is restricted to configured admin email addresses.
- Authenticated dashboard
- Admin email allowlist
- Internal task secrets
- OAuth and email sign-in
Security
Security controls for account and conversation data.
Introgent uses platform security controls, authenticated dashboards, billing safeguards, and operational review to reduce risk.
Data protection
Production data is stored in managed infrastructure. Secrets should only be configured in deployment environments and never committed to source control.
- Managed Postgres
- Environment secrets
- Stripe webhook verification
- Least-access operational practice
Abuse protection
The app includes request throttling and billing credit checks. High-volume production launches should add Vercel WAF and shared Redis rate limiting.
- Signup throttling
- Chat throttling
- AI credit gate
- Recommended WAF layer