• Use only the public Integration Code (never ship secrets)
• Avoid sending PII in events (prefer identifiers)
• Use HTTPS/TLS for all traffic
• Sanitize user input in your app before it reaches sinks

Sublyzer can surface security-related signals (e.g. insecure headers, risky patterns). Always validate findings before acting.

TestingAI can help exercise flows and highlight risky patterns. Use it as a complement to code review and dedicated security tooling.

See: TestingAI Guide