What protects the panel, the sessions and the API, and what is still being fixed.
Two-factor authentication for panel accounts.
Each user sees the sessions open on their own account and ends the ones they do not recognise.
After repeated attempts, access is locked and the screen says when trying again becomes possible.
Protection against automation on login and forms, with the provider the installation chooses.
The whole site can be visible only to authenticated users, without taking down what runs behind it.
Forms and requests are protected by a token. When the token expires with the screen open, it is renewed without losing what was typed.
Each token has a limited scope and can be revoked. An agent reaches the installation as a user, not with the server key.
HTTP APIThe remote editor and the development tools connect through signed tokens.
Dev Tools in VS CodeThe file type is checked from its content, not from the extension it claims.
The core security review is public: the documentation lists the findings still being fixed and the care needed in multi-user installations. We would rather say what is missing than promise what was not verified.
Conn2Flow is the tool. If you need the Architect to design your company's strategy using this technology...
Hire Specialized Consulting