Video Security
How do we protect your course videos without DRM?
Full DRM is overkill for educational content. Our layered approach achieves Vimeo-equivalent protection at a fraction of the cost. Built on AWS S3 bucket policies (opens in new tab) and CloudFront signed cookies (opens in new tab).
Infra
S3 Bucket Policies
Referrer-based access restrictions ensure videos only load from your approved domains
Infra
CloudFront Signed Cookies
Session-based access control ties video delivery to authenticated user sessions
Infra
Pre-signed URLs
Short-lived S3 URLs that expire after minutes, preventing link sharing
Player
HTML5 controlsList
nodownload attribute removes the download button from the native video player
Player
disablePictureInPicture
Prevents pop-out player that could bypass page-level protections
Player
Context Menu Blocking
Disables right-click save-as on video elements
WP
wp_kses Allowlist
WordPress mu-plugin preserves security attributes through content sanitization
Last updated: April 2026. Implementation estimate: 8–11 hours for a mid-senior engineer.