Security, handled for you.
On Devani Hosting, security is a shared job, and we take the bigger half. We run the servers, issue and renew your SSL, patch and update the platform, and back everything up automatically. No plugin marketplace shipping mystery code, no third-party scripts you didn't ask for.
Security by reduction.
Most CMS security problems come from things you'd normally manage yourself: servers, certificates, updates. On Devani Hosting those are ours, and a lot of the rest simply doesn't exist by design.
No plugin marketplace
The biggest CMS attack surface, third-party plugins from unknown authors, doesn't exist here. There's nothing to misconfigure or trust by accident.
No database
Your site is stored as plain files. There is no SQL to inject because there is no SQL at all: public pages are server-rendered clean HTML behind our CDN, and the admin sits behind its own login, invisible to crawlers.
Backups handled
Every change snapshots automatically, with 30-day rollback. If you ever get hit by a bad edit or a compromised account, you can revert the whole site in seconds.
Patched for you
We patch and update the platform for every hosted site automatically, so you're never left running a stale, vulnerable version. When a fix ships it rolls out everywhere at once: nothing for you to monitor or apply.
The parts that stay yours.
We run the infrastructure: servers, SSL, updates, backups. A couple of things stay with you: who gets access, and what you publish. Here's the honest split.
- Admin access. You set the password and decide who gets in. We recommend a long passphrase and a hardware security key if you're protecting client work.
- Who you invite. Collaborators you add can edit your site. Review access now and then, and remove people when they move on.
- Your content. What you publish is yours, and yours to stand behind. We host and serve it; we don't write it for you.
- Third-party embeds. Any script, iframe, or pixel you paste in runs with your site's trust. Add only the ones you actually trust.
- Everything underneath. Servers, HTTPS/SSL, patching, the media CDN, and automatic backups are all ours: managed, renewed, and nothing for you to operate.
Found something? Tell us.
If you find a security issue in Devani or Devani Hosting, email [email protected]: privately, please, so a fix can ship before details circulate. We respond to every report. We don't run a bug-bounty program yet, but we credit reporters in release notes when they want to be named.
Less surface, fewer problems.
A simpler stack is a more secure stack, and on Devani Hosting the hardest parts are managed for you: nothing to patch, nothing to babysit.