diff --git a/cshare-app/src/pages/SecurityPage.jsx b/cshare-app/src/pages/SecurityPage.jsx new file mode 100644 index 0000000..bc71086 --- /dev/null +++ b/cshare-app/src/pages/SecurityPage.jsx @@ -0,0 +1,92 @@ +import { ShieldIcon, LinkIcon, ClockIcon, EyeIcon } from '../components/Icons'; +import { useNavigate } from 'react-router-dom'; + +const PRACTICES = [ + { + icon: , + title: 'Encryption at rest', + desc: 'All files are encrypted with AES-256 before being written to disk. Encryption keys are managed separately from the data they protect and rotated on a regular schedule.', + }, + { + icon: , + title: 'Encryption in transit', + desc: 'All connections to CShare use TLS 1.3. We do not support TLS 1.0 or 1.1. HTTPS is enforced on every endpoint — there is no HTTP fallback.', + }, + { + icon: , + title: 'Automatic deletion', + desc: 'Files are permanently deleted at link expiry — not marked as deleted, actually removed from storage. Backups are purged within 7 days. No recovery path exists after deletion.', + }, + { + icon: , + title: 'Access control', + desc: 'Share links use cryptographically random identifiers. Only someone with the exact link can access a file. On Pro plans, optional password protection adds a second factor.', + }, +]; + +export default function SecurityPage() { + const navigate = useNavigate(); + + return ( +
+
+
+ // + Security +
+

Security at CShare

+

+ We are a file-sharing service. Security is not a feature — it is the foundation. Here is exactly what we do to protect your files. +

+
+ +
+
+ {PRACTICES.map((p) => ( +
+
+ {p.icon} +
+

{p.title}

+

{p.desc}

+
+ ))} +
+
+ +
+
+ // + Infrastructure +
+
+ {[ + ['Storage location', 'EU-based object storage with redundant copies across availability zones.'], + ['Backup policy', 'Encrypted backups retained for 7 days. Backups are purged within 7 days of file deletion.'], + ['DDoS protection', 'Edge-level DDoS mitigation on all endpoints.'], + ['Dependency scanning', 'All dependencies are scanned for known vulnerabilities on every build.'], + ['Access logging', 'All admin access to production infrastructure is logged and reviewed.'], + ].map(([label, value]) => ( +
+ {label} + {value} +
+ ))} +
+
+ +
+
+
+

Found a vulnerability?

+

+ We take security reports seriously. Please disclose responsibly by emailing security@cshare.app. We will acknowledge within 24 hours and work with you on a fix. +

+ +
+
+
+ ); +}