Security & Fraud Protection

Security is layered across the platform: at the perimeter, at the session, at the instruction, and in the audit record.

Authentication

We support RFC 6238 authenticator codes, issued by any compatible authenticator app, together with single-use recovery codes. SMS one-time codes are not offered: a number can be moved to another SIM without your involvement, and a code sent that way is no longer something only you hold.

Session and device controls

Every sign-in records a device footprint derived from your browser, platform and network. New devices trigger an alert, and you can block any device from your security centre at any time.

Perimeter controls

Requests are evaluated against country, subnet and client-signature rules before they reach the application. Repeated failed sign-in attempts trigger a progressive lockout.

How we will never contact you

We will never ask for your password, an authenticator code, a recovery code or a card verification value — by email, by SMS, or by telephone. If anyone asks you for these, it is fraud. Report it immediately to +1 (800) 555-0142.

Reporting a vulnerability

If you believe you have found a security issue, contact clientservices@industrialspares.store. We will not pursue action against good-faith research that avoids privacy violations and service degradation.