Security Policy

1. Encryption & Password Storage

Traffic between your browser and Meetlop is encrypted using HTTPS/TLS. Passwords are never stored in plain text; they are hashed using Laravel's default secure hashing algorithm (bcrypt or Argon2) before being saved.

2. Authentication Security

• Rate limiting on login and other sensitive endpoints to slow automated attacks.
• Account lockout after repeated failed login attempts.
• Login history showing IP address, browser, device, approximate location, and time, so you can spot unfamiliar activity.
• The ability to log out of a single device or all devices at once.
• Foundations in place for future Two-Factor Authentication (2FA).

3. Automated Fraud & Abuse Monitoring

Meetlop continuously monitors backlink activity for patterns consistent with fraud — hidden links, cloaked links, JavaScript-injected links, rapid link removal, and multi-accounting — as described in our Terms and Conditions.

4. Automated Scans

The platform runs scheduled and on-demand crawls to verify backlink health, and applies CSRF protection, output escaping against XSS, and parameterized queries against SQL injection across all forms and endpoints, in line with OWASP recommendations.

5. Reporting a Vulnerability

If you believe you have found a security vulnerability in Meetlop, please report it responsibly to help@meetlop.com with enough detail to reproduce the issue, and avoid accessing, modifying, or exfiltrating other users' data while investigating. We will acknowledge reports and work to resolve valid issues promptly, and we ask that you give us a reasonable opportunity to fix an issue before disclosing it publicly.

6. Contact

Security reports and questions: help@meetlop.com.