Security at DeployYourApp
Security is not a feature we added — it is the foundation we built on. Your signing key never leaves your machine, and no device installs an update it cannot verify came from it.
Bundle Integrity Architecture
DeployYourApp protects updates by proving where they came from and constraining what they can contain, not by hiding them. Your signing key pair is generated on your local machine; the private half is never uploaded to our servers — not during setup, not during deployment, not ever. Bundles themselves are plain, signed ZIP archives, so you — or an app store reviewer — can download one and read every byte of it.
Client-Side Key Generation
Signing keys are generated on your local machine using cryptographically secure random number generators. The private key never leaves your development environment — only the public half is uploaded, so that the server and your app can verify what you signed.
Bundle Signing (RSA-4096)
Every bundle uploaded to DeployYourApp is digitally signed using your RSA-4096 private key. When your app downloads an update, it verifies that signature against the public key compiled into the app before applying anything — and verification is mandatory. With no public key configured, or with no signature supplied, the update is refused outright.
Per-File SHA-256 Manifest
Each bundle carries a manifest listing the SHA-256 hash of every file it contains. As the archive is extracted, each file is hashed and compared against that manifest in both directions: every declared file must be present with a matching hash, and every extracted file must be declared. A bundle with no readable manifest is refused.
Web Assets Only, Enforced
The updater is structurally incapable of installing anything but web assets. Every archive entry must carry an extension from a fixed allowlist, and the leading bytes of every extracted file are checked against a table of native executable formats regardless of what the file is named. The same policy runs in the CLI before upload, so violations fail at your terminal.
Infrastructure Security
Our infrastructure follows industry best practices for security. All traffic runs over TLS, security headers are set with Helmet, every endpoint is rate limited, and account activity is written to an audit log.
Audit Logging
Every significant action in your organization is recorded in an immutable audit log. Track who deployed what, when channels were modified, and who accessed sensitive settings.
Responsible Disclosure
We take security vulnerabilities seriously. If you discover a potential security issue, please report it responsibly.
Email security vulnerabilities to info@deployyour.app. Please include a detailed description of the vulnerability, steps to reproduce, and potential impact.