Infrastructure
Our hosting security approach
Security here is layered: five levels, from the building the servers sit in to the code running on them.
Five levels
How we handle security at each level
Our approach to security at Web Host Nepal Pvt. Ltd. is thorough and multi-layered. Each level below covers a different part of the stack.
Datacenter security
- Every datacenter we use goes through a due-diligence review focused on security and stability.
- Surveillance cameras, biometric locks, limited-access policies and on-site security personnel.
- Facilities are assessed on their past practice and on their commitment to security research.
Network security
- DDoS mitigators, intrusion detection systems and firewalls at several levels of the network.
- The firewall blocks unauthorised network access around the clock.
- Network intrusion detection covers targeted attacks and known vulnerabilities.
- Protection against distributed denial-of-service (DDoS) attacks.
Host security
- A host-based intrusion detection system (HIDS) monitors activity inside the server and flags changes or intrusions.
- Finding a change quickly limits the damage it can do and keeps the system available.
Software security
- Automatic updates and patch management keep servers on current security patches.
- Consistent patch management keeps systems up to date and reduces the window for exploitation.
Application security
- Application software is developed in-house, so the security decisions inside it are ours.
- Third-party products are tested and understood — architecture and implementation — before they are integrated.
- Our product engineering process includes security checks at every layer, and sensitive data is stored encrypted.
What that looks like on a hosting account
The five levels describe the platform. On the cPanel platform behind our web hosting, reseller, Node.js and Python plans, the account-level controls are published on every plan page.
A free SSL certificate is included with every web hosting, multi-domain, reseller and cloud plan. Web hosting plans list CloudFlare protection, and the Node.js and Python plans include the CloudFlare CDN.
In the facility
The shared platform stores your data on a mirrored RAID 1 NVMe drive, in a facility with redundant power, HVAC and fire-detection systems. Those figures are published in full on the web hosting specification.