Security¶
Infrastructure security at Subscribed is handled through two main layers:
| Topic | Description |
|---|---|
| WAF | Cloudflare Web Application Firewall — traffic filtering rules across all sites |
| VPN | L2TP/IPSec VPN for secure access to internal servers |
| Backups | SQLBak automated backups with Hetzner Storage Box and Synology redundancy |
| Payment Providers | IP whitelisting for QuickPay, Adyen, and MobilePay |
When Cloudflare Zero Trust itself fails — the tunnel drops, or SSH to a locked-down host is lost — see Zero Trust Resilience.