Nexobiz Foundation Console

Security Control Plane

# Threat response, tamper review, and key rotation

Coordinate platform-wide security policy, customer-safe tamper restrictions, managed key rotation, and data protection controls.

Security authority

## Threat Signals

critical

invalid_update_signature

critical

license_tamper_detected

critical

audit_chain_broken

critical

impossible_travel

warning

api_error_rate_spike

warning

unusual_ai_or_sms_consumption

## Tamper Response

preserve_core_data_access
disable_ai_cloud
disable_marketplace
disable_signed_updates
disable_premium_modules
open_tamper_review

## Managed Keys

manual

### app_key

365d

### license_public_key

365d

### update_public_key

90d

### webhook_signing_key

180d

### api_token_pepper

180d

### export_watermark_secret

## Data Protection

encryption_at_rest
encryption_in_transit
tenant_scoped_access
secure_file_upload_validation
csp_headers
signed_webhooks
rate_limiting
redacted_diagnostics