You're building a product, not a security team. When you pick a backend, you're trusting it with your users' data, their accounts, and your reputation. At WoWSQL, we take that trust seriously, and security is built into every project from day one.
Here's what that protection looks like in practice, explained in plain language.
Your data is never public by accident
Every WoWSQL project sits behind your own API keys. Your tables, files, storage buckets and user records all need a valid key before anything is returned. Anonymous visitors see nothing.
That means a forgotten setting or a guessed URL doesn't turn into a data leak. If a request doesn't carry your key, it doesn't get your data.
Your users' accounts are protected
Logins are one of the most common targets on the internet, so we've hardened them in a few ways:
- No hints for attackers. Login errors are generic, so no one can probe your app to find out which email addresses have accounts.
- Brute-force protection. Repeated login attempts are rate-limited, which stops password-guessing scripts from hammering your sign-in page.
- Phone OTP sign-in. With SDK v3.9.1, your users can sign in with a one-time code sent by SMS, across our JavaScript, Python, Go, PHP and Swift SDKs.
Other websites can't act on your users' behalf
Browsers send requests between websites all the time. Without the right rules, a malicious site could try to make requests to your backend while pretending to be your logged-in users.
WoWSQL applies strict cross-origin rules, so untrusted websites can't make authenticated requests to your project.
Everything is encrypted
Every connection to WoWSQL is forced over HTTPS, using modern TLS 1.3 encryption. We also use HSTS, which tells browsers to always use the secure version of your project and never fall back to an unencrypted connection.
Your data is protected while it travels between your app, your users and your backend.
Less for attackers to learn
Attackers often start by gathering clues about which software and versions a server runs, then look for known weaknesses. We don't give them that head start. Server software versions are hidden, and health checks reveal nothing beyond a simple "ok".
We check every day
Security isn't something you set once and forget. We run automated security audits on the WoWSQL platform every day. That way, issues get caught and fixed quickly, often before anyone notices.
What this means for you
You get a production-ready Postgres backend, with REST APIs, auth, storage and realtime, without having to become a security expert first:
- Your data stays locked behind your API keys.
- Your users' logins are protected from guessing and bots.
- Every connection is encrypted.
- The platform is checked every day.
You ship features. We guard the backend.
Have a security question or want to report a concern? Reach us anytime at support@wowsql.com.