Security

Last updated: June 23, 2026

Transport

The site is served over HTTPS with HSTS preload. All API calls go over TLS 1.2+.

Rate limiting

Waitlist submissions are rate-limited per IP to prevent abuse. The exact limit is a moving target to deter scraping.

Data at rest

Waitlist requests are sent through a server-side contact workflow. Database credentials are not exposed in the browser.

Reporting vulnerabilities

Found a security issue? Please email team@narwall.tech with a clear reproduction. We aim to acknowledge within 48 hours.