ECG RHYTHM LAB

Security

The application is a static client-side simulator. It contains no passwords, API credentials, authentication sessions, admin routes or cloud database. React renders user notes as text, not executable HTML. Imports are not accepted.

The production package includes security-header rules and a restrictive content security policy for Cloudflare Pages. Their enforcement, HTTPS and actual hosting settings require verification after deployment. No application-level rate limiting is claimed for this static app.

Dependency and focused software checks are not a penetration test or a guarantee against compromise. Report an issue to [email protected]; never send patient information or credentials.