Security at HostPilot
Security you can see.
Control you keep.
Know who has access, choose what reaches your servers, and see what changed. Practical controls, built into the same console you use every day.
Built into your workspace
- Your people
- Individual logins and workspace roles
- Your infrastructure
- Firewall rules, SSH keys and certificates
- Your visibility
- Activity history with who changed what
One console. Clear access. Traceable changes.
Access, protection and accountability
From your team’s first sign-in to the next server change, these controls are available in HostPilot today.
- Individual team access
- Invite people into your workspace with their own login. Owners and admins manage membership, so access can change as your team does.
- Session controls
- See where you’re signed in, revoke a session you don’t recognise, or sign out your other devices when you change your password.
- Firewall rules
- Define reusable security groups and attach them to supported servers. Choose which traffic can reach your services from the server’s Firewall tab.
- SSH key management
- Keep your team’s public SSH keys in one place. Add, label and remove the keys stored on your hosting account from the console.
- Certificate visibility
- Review stored SSL certificates and their expiry dates. Manage Let’s Encrypt certificates for your containers from their SSL settings.
- A record of changes
- Follow hosting changes in your activity feed, with the person or agent behind each action. Support sessions are recorded too.
Good security is a shared job
We give you the controls and visibility. Your team decides who needs access and how your applications are maintained.
A few habits that make a difference
- Give each teammate their own login and review access when people leave.
- Use a unique password and check your active sessions regularly.
- Limit open ports and keep your applications and container images up to date.
- Review certificates and make sure your backup and recovery plans fit your workload.