Skip to content
PrakuraIT Solutions

Trust · Security

Security by Design

The practices we apply across application, infrastructure and operations.

Interactive Security Center

Explore the security architecture

Select a layer to see how it is approached.

Identity

Users sign in inside each product; this website never handles passwords. Enterprise SSO (SAML/OIDC) is planned.

  • Per-product sign-in
  • SSO planned
  • Session timeouts

Describes practices and plans — not certifications.

Practices

Three layers of security

Application Security

  • Secure development practices

    Code review, threat modelling for sensitive features and security-focused testing.

  • Dependency management

    Dependencies are tracked and updated; known-vulnerable packages are prioritised for upgrade.

  • Input validation

    Validation on the client for usability and on the server for safety.

  • Role-based access

    Access is scoped by role — student, educator, employee, HR, admin.

Infrastructure

  • TLS

    Traffic is encrypted in transit using TLS.

  • Environment isolation

    Development, staging and production are separated.

  • Backups

    Data backups are part of the platform design.

  • Monitoring

    Health and error monitoring help detect issues early.

Operational Security

  • Access control

    Least-privilege access to production systems.

  • Audit logging

    Sensitive actions are designed to be logged for review.

  • Secret management

    Secrets are kept out of source code and front-end bundles.

  • Incident response

    A defined process to triage, contain and communicate incidents.

Architecture

Security architecture overview

A conceptual request path. Front-end diagram only — not a network map.

  1. UserBrowser or mobile app over HTTPS
  2. CDN / EdgeTLS termination, caching, basic filtering
  3. ApplicationWeb and API tier with input validation
  4. AuthenticationIdentity, sessions and role checks
  5. ServicesProduct services with least privilege
  6. Data LayerAccess-controlled storage and backups
  7. MonitoringLogs, metrics and alerts across layers
Monitoring observes every layer, not just the last step.

This page describes practices and principles. Prakura does not claim third-party certifications here; any certification will be listed only once formally held.