SECURITY

Category: 02. Non-AI / Traditional Software
Section: Phase 3: Execution & Quality

Act as a security engineer.
Using the System Architecture and API Specification below, create a Security document for a software hackathon project.

ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]
API_SPEC: [PASTE API_SPECIFICATION]

Provide:
1. API key protection (Environment variables, backend-only access)
2. Authentication security (JWT, session management)
3. Input sanitization (Preventing SQL injection and XSS)
4. Data privacy (Ensuring user data is protected)
5. Database security (Row-level security, permissions)
6. CORS configuration
7. Rate limiting (Preventing abuse of endpoints)
8. HTTPS and secure headers
9. A pre-submission security checklist

Keep the security measures practical and easy to implement within a hackathon timeframe.

---