Agentek Security

← All platforms

Agentek Business

The BIB platform every customer site runs on

https://staging.agentek.ee/business

Protected, 3 improvements open

Live checks from outside

What any visitor's browser sees, checked every 6 hours.

Last checked 2 Nov 2026, 13:57

Code and release reviews

The code every platform and BIB runs on, reviewed before each release and by our outside-in scans.

Release check

Last checked 2 Nov 2026, 07:44 · Code version 6b0c507

Release check run 1: six real issues found, all six fixed and live on staging.

  • Full Content-Security-PolicyPlanned: needs the map, payment and video origins listed firstImprove
  • Visitor text reaches AI models only as dataNo model alone decides a scam or a banPass
  • AI assistants hold no committed merge rightsFixedPass
  • Code scan: script injection, raw SQL, shell, eval, prompt boundaries0 findings in 3,401 filesPass
  • Production dependencies without known advisories9 advisories fixed to 0; trivy 50 to 0Pass
  • No hidden time- or count-triggered code0 findings in 1,392 filesPass
  • Only web ports open80 and 443Pass
  • Build pipeline actions pinned to exact versionsFive actions pinnedPass
  • Rate limits use the real client addressFixed and checked live on stagingPass
  • Visitor text cannot run as script on BIB sitesStructured data escaping fixed (T-141)Pass
  • No secrets in the code's history0 secrets in 13,985 stored filesPass
  • Security headers on every responsenosniff, referrer policy, HSTS, no powered-by; live since 2 Nov 05:44 UTCPass
  • Uploads limited to safe image types and re-encodedJPEG, PNG, WebP onlyPass
  • Signed-in pages and tenant isolationNot checked yet; plannedNote