I am developing a web application that is for quizzes (users can practice their listening, writing, reading, etc.) and it uses a subscription model, some of the tools I'm using are: Stripe for payments AWS for media (videos or audios for the quizzes) MySQL for database (still debating between Digital Ocean or GCP to host it) GoDaddy for domain purchase oAuth2 for authentication and login GitHub for repository and so on... so, things im doing in the backend (built in Python) to protect routes: For each route the user MUST exist in the DB, MUST have an active session and MUST have an active subscription, if all of that is true then the user can access the route. Also, for the database I will not store any sensitive data (credit card number and such) so that in the case the data gets stolen or hacked, the stolen data isnt THAT useful to the attacker. So my question is (sorry for being paranoid with security): I know hosts as render.com offer SSL certificates. I am thinking to add captchas for loging and when users are purchasing a subscription. What other layers of security should I take into consideration? Should a cibersecurity team be involved? Thank you for your time Continue reading...
