How it works
You edit in a dashboard. Visitors only ever see finished files.
When you press Publish, the platform renders your pages into plain HTML, CSS and images and copies them to your hosting. The dashboard itself lives somewhere else entirely, behind its own sign-in, with two-step verification available.
That separation is the whole idea. A visitor, or an attacker, who reaches your domain finds documents. There is no database behind them to query and no code to trick.
- Security headers and a strict content security policy on every page
- Lead forms protected by a honeypot, timing and proof-of-work
- Every change recorded: who, what and when
- Roles for partners, staff and outside vendors