Skip to content

Security Policy

How Sitebefy protects the platform and the websites it hosts. This page describes what is actually in place, not aspirations.

Your account#

  • Passwords are stored only as modern one-way hashes, never in plain text.
  • Two-factor authentication is available in Settings, Security.
  • Sensitive actions (changing security settings, deleting the account) require you to re-enter your password even inside a signed-in session.
  • Settings, Security lists your active sessions and remembered devices, and lets you end any of them. Sign-ins from unrecognized devices are recorded, and you can flag one that was not you directly from the notification.
  • Security-relevant account events are written to an append-only audit trail designed so that tampering with past entries is detectable.

Your websites#

  • Every hosted website runs under its own operating-system account with its own PHP process pool, isolated from every other customer's site. A compromise of one site does not grant access to another.
  • Traffic is encrypted in transit with TLS.
  • The platform's edge enforces per-client rate limits and automatically blocks abusive clients.
  • Files customers upload for import are validated and size-capped before they are processed, and processed copies are removed on a fixed schedule.

The platform#

  • The platform database is backed up daily, with backups kept up to 14 days.
  • Administrative access to customer data is role-restricted, masked for support staff, and every access is logged with a reason.
  • Sign-up and sign-in are defended against automation and abuse: rate limiting, disposable email domain rejection, and risk scoring that can hold suspicious accounts.

Reporting a vulnerability#

If you believe you have found a security problem, tell us privately at chidang@flexa.vn before disclosing it publicly. Include what you found and how to reproduce it. We will acknowledge your report within 24h and keep you informed while we fix it. We ask that you do not access other people's data while researching; make a test account.

Last updated: 5 Sep 2026

Security Policy | Sitebefy