Security

Security at XE

Security is foundational to the XE protocol. From hardware root of trust to end-to-end encrypted messaging, every layer is designed with security as a first principle.

Practices

Our Security Approach

HTTPS everywhere with strict transport security;
End-to-end encryption for all M2M communications;
Hardware secure enclaves for key storage and identity attestation;
Bcrypt password hashing with high cost factors;
Rate limiting on all authentication endpoints;

CSRF protection and secure session management;
Input validation and parameterised queries on all API endpoints;
Comprehensive audit logging for sensitive operations;
Regular security audits and penetration testing;
Open source code for community review and inspection.

Responsible Disclosure

We welcome security researchers to responsibly disclose vulnerabilities. If you discover a security issue, please report it to us privately so we can address it before public disclosure.

Report a Vulnerability

Email security issues to our dedicated security team. Please include detailed steps to reproduce the vulnerability.

security@xe.network

Questions About Security?

If you have specific security questions or requirements, our team is happy to help.