Security

An overview of how nxtscan handles security for data in transit, data at rest, and operational access.

Data in Transit & At Rest

All communication between your browser, the API, and Supabase uses TLS. Scan data and reports are stored in Supabase/PostgreSQL and object storage with encryption at rest provided by the underlying platform.

Access & Authentication

Dashboard access is gated through Supabase Auth. Row-level security (RLS) ensures that users can only access their own domains, scans, and alerts.