PROTECT · REVIEW · GOVERN

Enterprise Security & Admin Control Center

Haala tajaajilaa, qindaa’ina nageenyaa fi hojii bulchiinsaa ilaali. Fuulli kun qorannoo dubbisaa qofa; settings server ykn account hin jijjiiru.

🛰️API healthChecking…

AfriGlobal AI · Server health endpoint

🔒ConnectionNot HTTPS

Header status unavailable

📦Browser storageUnavailable

Storage estimate not supported

📱Offline capabilityChecking…

Browser capability only; does not prove offline assets are current.

AI service status

Internal provider details and credential sources are private.

Status limited

This page shows only general availability. It never displays provider names, key names, key origins, secret values or deployment credentials.

Security review checklist

Items you mark are saved only in this browser. They are reminders, not automated audits.

HTTPS connectionThe app is served over HTTPS in production.Server-only API keysProvider keys belong in server environment variables, never browser code.Authentication and authorizationProtect private data routes with verified server-side user checks.Rate limitingUse a shared store for global limits across serverless instances.Backups and retentionDefine backups, retention periods and deletion procedures.Dependency updatesReview and update framework and package dependencies regularly.

0 of 6 review items marked

Admin operations guidance

👤 Identity & access

Use verified authentication and server-side role checks before exposing admin actions or private records.

🧾 Audit trail

Record important administrative changes on the server with actor, time, action and outcome. Avoid logging secrets.

🛡️ API protection

Combine validation, authorization, rate limiting and abuse monitoring. In-memory limits are not global across serverless instances.

🧰 Incident readiness

Prepare key rotation, backup restore, incident contacts and a documented recovery procedure.