We recently completed a comprehensive security review of the EmechNET website, services portal, and supporting systems.

This work included:

• Stronger login and session protection
• Improved administrator access controls
• Two-factor authentication for administrators
• Safer account registration and CAPTCHA enforcement
• Protection against cross-site request forgery
• Stricter file-upload validation
• Improved protection against malicious page content
• Modernized password storage
• Stronger API authentication and request limits
• Restricted cross-origin access
• Updated HTTPS and encryption settings
• Improved protection of configuration files and diagnostics
• Removal of obsolete session data
• Tighter file and service permissions
• Additional security headers and browser protections
• QR-code setup for administrator authenticator apps

The public website, services portal, statistics, and account workflows were tested after these changes and remain operational.

Some users may be asked to sign in again as existing sessions expire. Administrators will also be required to configure an authenticator application when accessing the administration area.

No sensitive implementation details, credentials, or infrastructure information are being disclosed as part of this announcement. Security will continue to be reviewed as the network and its services evolve.