Trust and security

TurboStack is a fully managed platform: Hosted Power secures, patches and maintains the underlying servers so you can focus on your application. This section explains what is handled for you, and where your own responsibility begins.

What "managed and secured" means

On every host, the platform provides:

• A hardened operating system with automatic security updates.
• A firewall on every host and TurboShield rate limiting and bot control.
• TurboRadar runtime threat detection and malware scanning.
• Malware protection and a Web Application Firewall (WAF).
• Free SSL/TLS (Secure Sockets Layer / Transport Layer Security) encryption and managed daily backups.
• Network-level Distributed Denial-of-Service (DDoS) mitigation.

See How we protect your platform for the detail.

Shared responsibility

Security is shared between Hosted Power and you:

Hosted Power handles	You handle
Server hardening, OS and platform patching	Keeping your application, plugins and themes up to date
Firewall, TurboShield, TurboRadar, WAF, DDoS mitigation	Strong passwords, who you grant access to, and your own data
Managed backups and the network	App-level configuration and which services you expose

Your part is covered in the Security hardening checklist.

In this section

• How we protect your platform
• DDoS and abuse protection
• Backups and recovery
• Access control and encryption
• Reporting a security issue

Related

• Security overview
• Security hardening (your part)
• Support