Security at SwarmPost

We take the security of your data and social accounts seriously. Here is how we protect you at every layer.

Data Encryption

Your data is encrypted at every layer, in transit and at rest.

✓AES-256 encryption for all social account tokens stored at rest
✓PBKDF2 password hashing with per-user salt — we never store plaintext passwords
✓HTTPS encryption for traffic between your browser and SwarmPost

Infrastructure

Deployed on hardened, globally distributed infrastructure.

✓Hosted on Vercel
✓PostgreSQL database hosted on Neon

Authentication & Access

Modern authentication protocols with multiple layers of defense.

✓Signed session tokens with a two-day expiry
✓OAuth connections with encrypted provider tokens
✓Rate limits on authentication and selected API endpoints

Compliance & Privacy

Privacy by design, with tools to help you stay compliant.

✓No sale of personal data to third parties — ever
✓Transparent privacy policy with plain-language explanations

Responsible Disclosure

Found a vulnerability? We appreciate responsible disclosure and will work with you to address it quickly.

1.Email your findings to [email protected]
2.Include a detailed description, steps to reproduce, and potential impact
3.We will acknowledge receipt within 24 hours and provide an initial assessment within 72 hours
4.Please do not publicly disclose the issue until we have had a chance to address it

We do not currently offer a paid bug bounty, but we will publicly credit researchers who report valid vulnerabilities (with permission).

Questions about security?

Reach out to our team and we will provide any additional information your organization needs.