GoRefer Trust Center
Network Security
Updated October 2026
About this page. This page describes how GoRefer works today. It is not an independent audit or a contractual service level. For questionnaire answers, or for documents we share under NDA, make a request through the Trust Portal.
We use HTTPS everywhere, standard browser security headers, and rate limits on sign-in and the API.
Connections
Updated October 2026
HTTPS everywhere
The website, web app and API are served only over HTTPS
Browsers are told to use HTTPS only
Browser security headers
Standard browser security headers limit where pages load scripts from and who can frame them
You can check the headers any page sends with a public header-checking tool
Rate Limits and Bot Checks
Updated October 2026
Rate limits
Sign-in, account recovery and the API have rate limits
Repeated failed sign-ins lead to a lockout
Bot checks
Firm landing-page forms and webinar sign-up forms use a bot check from Cloudflare
Questions about network requirements: security@gorefer.io