Security model

Understand Terlido's defense layers.

How to use it

Keep Firebase sessions, workspace roles, encrypted provider credentials, hashed API keys, signed webhooks, URL validation, rate limits, and audit logs configured.

Important behavior

Authorization is enforced on the server. Never rely on hidden UI controls as a security boundary.