Security

How Nexugen keeps your app safe

You run the business. These are the things Nexugen does so your app, your customers’ files and your money stay safe.

Checked before it goes live

Every app Nexugen builds is checked for security problems before it goes live, and you see what the check found on the app itself.

  • The packages the app is built on, for known security holes
  • Passwords and keys left in the code where someone could find them
  • Actions that change your data without asking who is signed in
  • How the app accepts files from the public

Patched automatically, if you want it

Switch on "Keep this app patched automatically" and Nexugen updates the app when a security fix comes out for something it uses, checks it again and puts the fixed version live. It stays off until you switch it on, app by app. Each update is an edit, so it uses credits like any other edit.

Uploads that cannot hurt the server

Files your customers upload go to managed file storage, kept apart from your app, and are served from there. An uploaded file is never run on the server.

  • Only the file types the app expects are accepted, up to a size limit
  • Each upload uses a one-time link that expires within minutes
  • Files are checked for what they really are, not just what they say they are

Payments go straight to you

Your app takes card payments through your own Paystack account, so the money lands with you. Your keys are stored encrypted.

Backed up every night

If your app has its own database, it is backed up every night and you can restore a backup in one click. A fresh backup is taken before every restore, so you can always go back. Earlier versions of the app itself can be brought back the same way.

Watched while it runs

Nexugen keeps checking that your live app answers. If it stops, you are told, and told again when it is back. You can also give your customers a public status page.

Teams and roles

Invite your team and give each person the access they need, and no more.

  • Viewer: can watch builds, read the app and comment
  • Member: can also make changes and steer a build
  • Admin: can also put the app live, manage settings and restore versions
  • Owner: can also share, delete, connect domains and handle billing

Your account

Secrets you give Nexugen are encrypted before they are stored. Two-step sign-in is available on every account. Live build rooms are private to you and your team unless you choose to share one.

Found a security problem?

Email hello@nexugen.app and we will look into it.

Platform status