ROUTE
Direct first
No extra relay when a direct route works.
More than a lock icon
Tight defaults without losing sight of the hot path.
The public site, accounts, S3 signatures, node keys and upstream authorization live in separate boundaries. Public pages carry no production credentials, and sensitive logs must be redacted.
TLS 1.2+TRANSPORT
HSTSHTTPS
CSPBROWSER
2FAACCOUNT
PUBLIC SITE
ACCOUNT / 2FA
S3 SIGNATURE
TRUST BOUNDARYVerifiable capability
Security requires continuous verification. TLS, CSP, HSTS, 2FA, least privilege and integrity checks each solve a specific boundary.Page updated · 2026-07-12
RECOVERY
Recoverable uploads
A network drop should not mean starting over.
SCALE
Expandable nodes
Entry points can grow with routes and load.
TRACE
Useful diagnostics
Failures leave a reason, not only an unknown error.
SENLUO PAN / INDEX
All product pages
More than a lock icon
Tight defaults without losing sight of the hot path.
The public site, accounts, S3 signatures, node keys and upstream authorization live in separate boundaries. Public pages carry no production credentials, and sensitive logs must be redacted.
Open Senluo Pan