Security Overview

All communications between clients and MostRent servers are enforced over modern HTTPS using TLS 1.3 with strict HSTS headers. Database storage and Cloudflare R2 file attachments (contracts, IDs, inspection photos) are encrypted using AES-256 with managed cryptographic keys.

Every database query and API endpoint in MostRent executes within a mandatory organization scope context. This multi-layered tenant isolation architecture prevents accidental data leakage between property management companies, ensuring complete privacy of your units and tenant ledgers.

User credentials are encrypted using industry-standard salted hashing algorithms. MostRent incorporates brute-force rate-limiting, IP-level bot protection, automated session timeouts, and instant global session revocation upon password updates.

MostRent runs inside containerized microservices behind enterprise Traefik load balancers and Cloudflare edge defense, mitigating DDoS attacks and zero-day threats. Database instances feature automatic health checks, automated rolling backups, and geographic redundancy.

MostRent does not store raw credit card numbers or sensitive banking PINs on its application servers. Financial transactions and automated recurring rent payments are tokenized and processed directly by PCI-DSS Level 1 certified payment partners.

We perform automated dependency scans and static code analysis on every release. Security researchers and customers who discover potential vulnerabilities are invited to report them responsibly to [email protected] for rapid investigation and coordinated patch deployment.