> For the complete documentation index, see [llms.txt](https://cluster-protocol.gitbook.io/whitepaper/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cluster-protocol.gitbook.io/whitepaper/technical-architecture/security-architecture.md).

# Security Architecture

<figure><img src="https://2560886960-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fo8bW2LCw3s9Oq1VIQ85p%2Fuploads%2FTBij4s2k6fvXOKsXlfiw%2Fimage.png?alt=media&amp;token=171abcd4-1117-4504-85ba-bb4e39bfae85" alt=""><figcaption></figcaption></figure>

| Layer          | Protection                                                                  |
| -------------- | --------------------------------------------------------------------------- |
| Network        | Web application firewall (bot control, injection prevention, rate limiting) |
| Transport      | TLS 1.3, HSTS                                                               |
| Authentication | Privy JWT + API keys (hashed, never stored in plaintext)                    |
| API            | Per-key rate limits, per-IP rate limits                                     |
| Data           | IPFS CIDs gated behind authentication and purchase verification             |
| Contracts      | UUPS upgradeable proxies, OpenZeppelin battle-tested libraries              |
| Access Control | Role-based: user, creator, admin                                            |