Authentication
Secure password hashing, server-side sessions and login throttling.
THINKERS CONSTRUCTION
The database, role model and audit controls are installed. Staff access remains disabled and no project data has been entered.
SECURITY FOUNDATION
Secure password hashing, server-side sessions and login throttling.
Six defined roles with least-privilege access boundaries.
Security and business actions recorded with time and outcome.