Security isn't a feature you bolt on — it's the foundation a hosting platform stands on. We've published the OrbixPanel Security Whitepaper so you can see exactly how the platform protects your server, your sites, and your customers' data, claim by claim.
Download the Security Whitepaper (PDF) →
What's inside
The whitepaper walks through the real mechanisms — not marketing — behind OrbixPanel's security posture:
- Tenant isolation — sandboxed app services, per-tenant resource ceilings, and fork-bomb guards so one workload can't take down another.
- Encryption — secrets protected with AES-256-GCM and a per-install key-derivation salt, so stored credentials stay unreadable even if a database is copied.
- Authentication — short-lived access tokens with rotating refresh tokens and a revocation denylist, hashed agent tokens, and two-factor login.
- Hardened delivery — automatic SSL, modern TLS, HSTS, and per-site security headers on every deployed app.
- Secure development — automated SAST in CI and a published coordinated-disclosure policy with a safe-harbor commitment for researchers.
Verify every claim
We hold the whitepaper to a simple rule: every statement in it must be true of the shipping code. It's versioned and dated on its cover, so you always know which release it describes. This is v1.1.
Found something, or have a question about our security model? See our security page or get in touch — we'd rather hear from you than not.