Security is part of the product, not a badge.

This release is a static browser application with no ToolHub login or application database. Browser-side security controls still matter.

Browser security controls prepared for deployment

The deployment configuration includes a Content Security Policy, clickjacking protection, HTTPS enforcement and restrictive permission policies.

Third-party code

External libraries are version-pinned and loaded only when a tool needs them. ToolHub does not intentionally load third-party advertising or analytics code in this release.

Vulnerability reports

Use the verified launch contact with the affected URL, browser, reproduction steps and observed impact. Do not include other people’s private data. Verified contact will be added at deployment.

Reviewed August 10, 2026.