Security architecture members can understand.

CSRF protection, bcrypt passwords, prepared statements, session hardening, login throttling, transaction-code transfers, and upload validation are built into the platform.