Answer
Security measures are planned according to risk and contract. They include individual accounts, strong sign-in and, where appropriate, two-factor protection, roles on a need-to-know basis, encrypted transfer, secure secrets management, separate environments, logging, monitoring and recovery tests. APIs additionally need consistent object and function authorisation, validation and resource limits.
No reputable software company can guarantee absolute security. What matters is traceable development, maintained dependencies, controlled releases and a reporting route for vulnerabilities. Supported versions and response services depend on the product and contract. schukai publishes security details only where this improves protection and transparency. Secret keys, internal access paths and exploitable configurations remain confidential.
As of 3 September 2026
Further reading
Related topic: Technology and operations