Canopy Firewall
A managed web application firewall and network filter stop common attacks and abusive traffic before they ever reach your code.
Security
Weather the storm. Stay in the light.
Security at LightServe is not a feature we bolt on. It is the way the platform is built, from the hardware in our racks to the defaults on your very first site.
Defence in depth
Many layers, so no single one has to be perfect.
Each layer assumes the one before it might fail. Together they keep your data safe, your services available and your team informed.
Encryption everywhere
TLS 1.3 protects data in transit. AES-256 protects data at rest, including snapshots and backups.
Isolation by design
Every server runs in its own hardware-virtualized environment, separated from every other customer.
DDoS absorption
Attack traffic is absorbed across our edge network, so floods in one place never reach your server.
Strong identity
Two-factor authentication, hardware security keys and single sign-on keep the right people in and everyone else out.
Audit trails
Every sign-in, setting change and deploy is logged, searchable and exportable for your own reviews.
Always-on watch
Someone is looking at the sky, all night long.
Our security and operations teams monitor every region around the clock. Alerts are triaged by people, not just by dashboards, and every incident ends with a written review.
Detect
Automated sensors flag unusual behaviour across network, host and application layers.
Contain
Affected systems are isolated quickly, protecting neighbouring workloads while we investigate.
Communicate
If your data is ever affected, you hear from us promptly, plainly and with next steps.
Learn
Each incident gets a blameless review and concrete fixes, so the same thing cannot happen twice.
Watching through the nightOur commitments
The details that matter, written down.
We publish how we work so you can judge it for yourself. If you need a questionnaire answered or a document reviewed, our team is glad to help.
Request security documentsEncryption in transitTLS 1.3
Encryption at restAES-256
Independent auditsAnnual
Penetration testingTwice a year
BackupsEncrypted, cross-region
Staff access to customer dataLogged and least-privilege
Vulnerability disclosuresecurity@lightserve.org
Responsible disclosure
Found something? Tell us.
We welcome reports from security researchers acting in good faith. Send details to security@lightserve.org and we will acknowledge your message within one business day, keep you updated and credit your work if you wish.
Security you can explain to your board.
Our team can walk through our controls with yours, in plain language.