Security
How we protect your services.
WeServer runs on proven open-source infrastructure and keeps the panel honest about what runs, where, and who did what.
Isolated projects per customer
Every customer's services are provisioned into their own project on the hosting layer, with their own containers, networks and namespaces. Your services never share a project with anyone else's.
HTTPS by default
Every service gets a Let's Encrypt certificate that is issued automatically and renewed before it expires — on your WeServer subdomain and on custom domains you connect.
Two-factor login
TOTP-based two-factor authentication protects your account. Enabling it revokes all existing sessions, so a stolen cookie dies the moment you turn 2FA on.
Hashed and encrypted secrets
Metrics agent tokens are stored only as SHA-256 hashes, deploy webhook secrets are encrypted at rest, and payment provider signatures are verified on every callback.
Audit logs
Sensitive actions — suspensions, terminations, upgrades, admin interventions — are recorded in an audit trail tied to the account that performed them.
Backups
Plans with backups included take a daily snapshot of your data that you can download from the panel at any time.
Abuse handling
A public abuse report channel and an acceptable-use policy we actually enforce keep the platform clean for everyone.
Dedicated resources
Each service runs with its own vCPU and RAM allocation, so a noisy neighbour cannot starve your app.
Found something that looks off? Email our abuse desk or file an abuse report. For account security questions, open a ticket from the panel and we will get back to you.
Run your stack with us.
Create an account, pick a package and deploy with SSL included.