Site: Site-wide security hardening sweep: SSRF protections on all server-side fetches, IP-based…

Site-wide security hardening sweep: SSRF protections on all server-side fetches, IP-based rate limiting across the tool APIs, stricter Origin and CSRF checks on the anonymous benchmark submission, and CSPRNG-based UUIDs in the detection-rule builders. No user-facing tool behaviour changes.