Trust & Security
How SkillTeach protects users — Last Updated: June 8, 2026
SkillTeach takes platform security seriously. This page summarizes the controls we use to keep your account, your data, and the broader SkillTeach community safe — and what we do (and don't do) with the security signals we collect.
How SkillTeach Protects Users
Continuous Security Monitoring
Every authentication attempt, sensitive action, and abusive traffic pattern is recorded in our internal Security Operations Center (SOC) dashboard. Our team uses this monitoring to detect issues early and protect the platform around the clock.
Threat Detection
We automatically flag suspicious activity — scanners, credential stuffing, brute-force attempts, abnormal request volume, and known abuse patterns — so we can investigate and respond before users are impacted.
Abuse Prevention & Rate Limiting
SkillTeach applies per-IP and per-account rate limits to keep the service fast and fair. Abusive requests are throttled, and persistently malicious IPs may be temporarily or permanently blocked.
Secure Access Controls
All traffic is encrypted in transit (TLS), passwords are hashed with bcrypt, and administrative tooling is gated behind a separate role-based access layer. Production data access is restricted to authorized personnel with a documented need.
Admin-Only Investigation Tools
When a security incident needs to be investigated, authorized administrators can use the internal SOC dashboard to review event logs. Real IP addresses are masked by default; revealing one requires an explicit administrator action and is itself recorded.
Privacy by Design
IP addresses are stored alongside a one-way salted hash and are never displayed publicly, shown to other users, or used for advertising. We do not sell security telemetry to advertisers, data brokers, or any third party.
Our Privacy Principles
- Security telemetry is collected only for legitimate security, abuse-prevention, and compliance purposes.
- Real IP visibility is restricted to authorized administrators acting in a security or compliance role.
- IP information is never displayed publicly and never shared with other users.
- We do not sell IP addresses, security logs, or any user security telemetry.
- Security logs are protected by the same encryption and access controls as the rest of your account data.
For full details — including the exact telemetry we collect, how long it's retained, and your rights — see Sections 1, 2, 4, 4A, and 6 of our Privacy Policy.
What Authorized Administrators Can See
SkillTeach maintains an internal Security Operations Center (SOC) dashboard used by authorized administrators acting in a security role. Inside this dashboard:
- Default views show a one-way hashed representation of the IP, not the real IP.
- Revealing a real IP requires an explicit administrator action and is itself recorded.
- Real IP visibility is used solely to investigate suspected abuse, fraud, or security incidents.
- Real IP addresses are never displayed in any user-facing surface (profiles, feedback shares, leaderboards, etc.).
- Security data is never sold and is never used for advertising or commercial profiling.
Report a security issue
If you believe you've found a vulnerability or want to report suspected abuse on the platform, we'd like to hear from you.
support@skillteach.ai