Trust is
built.
Controls protect data and workflows. Security improves through review, testing and updates.
What we protect
Administrative sessions are checked on the server. Private application data uses a dedicated database role and isolated schema. Public pages restrict scripts through a Content Security Policy.
Payment and delivery
Digital downloads require a signed receipt and a payment checked directly with Mercado Pago. Seller, currency, amount, live mode and refund state must match. A browser redirect alone does not release a download.
Web security review
Our defined-scope review covers HTTPS, headers, exposed files and permissions in the workflows you supply for a website you own. It produces a prioritized report. It is not invasive penetration testing or a certification.
Responsible disclosure
Report a suspected issue to contato@nemethblack.com.br. Include the affected route and a minimal reproduction without accessing another person’s data. No website is impossible to attack, and public interface code can be inspected.