Security, Integrity & Responsible Engineering
Walletmix Limited engineers digital platforms, energy systems, and communications technology with defense-in-depth principles. We prioritize transparent governance, strict role-based access, and robust operational resilience.
Infrastructure & Hosting
Containerized production workloads hosted on high-availability Linux nodes with Nginx reverse proxying, TLS termination, and health check monitoring.
- Isolated container networks per service
- Encrypted volume attachments
- Automated crash recovery & supervisor loops
Cryptographic Protection
Modern cryptographic primitives applied across all transmission and persistent storage layers.
- TLS 1.3 enforced for all external HTTP traffic
- AES-256-GCM authenticated secret storage
- PBKDF2/Argon2 password hashing algorithms
Identity & Governance
Strict multi-factor authentication (MFA) and least-privilege role-based access control (RBAC) across all administrative tools.
- RFC 6238 TOTP engine with single-use backup codes
- Separated owner, publisher & sales-support roles
- Full immutable audit event logging
Secure Development (SDLC)
OWASP-aligned engineering practices designed to eliminate injection, broken authentication, and sensitive data leakage.
- End-to-end static TypeScript compilation
- Automated regression and unit test verification
- Parameterized SQL query execution
Backups & Continuity
Scheduled database dumps, off-site snapshots, and documented disaster recovery procedures to safeguard commercial integrity.
- Automated daily PostgreSQL compressed backups
- Pre-deployment rollback checkpoints
- Persistent media storage volume decoupling
Regulatory & Hardware Safety
Compliance guidance across Bangladesh regulatory domains, including BTRC radio spectrum and utility solar interconnection.
- BTRC radio frequency licensing documentation
- Utility net-metering engineering reviews
- Manufacturer-certified battery BMS standards
Responsible Vulnerability Disclosure
Walletmix welcomes responsible security research. If you believe you have discovered a potential security vulnerability in our web applications, APIs, or infrastructure, please report it to our engineering team. We commit to reviewing submissions promptly and will not take legal action against researchers acting in good faith.