SetCloud
✦ Ask AI Get started

~/products/platform-security

// security/platform-security

Isolation is the default.

Secure on every account

SetCloud uses organization-scoped access checks, workload credentials, private networking, and separate logical database roles. Encryption and certificate management are built in. Your app still needs its own authentication, permissions, and secure code.

Get started Security overview

// 01 — tenant isolation

Every tenant, walled apart.

Project databases use separate logical databases and login roles on shared private infrastructure. Workload identities scope access to linked resources, and the dashboard checks organization ownership. Shared infrastructure remains shared; application-level tenant separation is your responsibility.

  • + Your own logical database and login role, isolated from every other tenant
  • + Private workload networking and scoped credentials
  • + Each running container kernel-isolated in its own micro-VM

// 02 — encryption

Encrypted on the wire and at rest.

Traffic to everything we serve — your deployed apps and custom domains included — is encrypted with HTTPS, and the certificates that enable it are issued and renewed for you. Stored data and secrets are encrypted too, so they're unreadable even at the disk level.

  • + Automatic HTTPS on every deployment and custom domain
  • + Custom-domain certificates require verified DNS records for issuance and renewal
  • + Databases and the secrets vault encrypted where they are stored

// 03 — account security

Two-factor, sessions, audit trail.

Enable SMS two-factor authentication in Settings. Review account activity under Activity and service operations in their project views. Project Security holds optional firewall and bot controls; there is no single dashboard page that certifies your security posture.

  • + Two-factor authentication on sign-in
  • + Actions on your services are audit-logged
  • + Settings for account security; Activity for recorded events

Current pricing

USD rates from the current billing catalog. Regional references vary with attributed usage.

Loading current rates…

Walled off from every other tenant.

Isolation and encryption are defaults, not add-ons.

Get started Security overview