Security
Powerful customization. Protected foundations.
Micronuage gives you the freedom to customize your website without giving AI or users unrestricted access to the underlying system. Your content and design evolve; the core architecture stays protected.
Stable
Customizations live in configuration, not code. A content edit can't take your site down, and every version can be restored.
Secure
Authentication, authorization and data access are handled by the platform — never by templates, customers or the AI.
Updatable
Because no site drifts into custom code, security and performance improvements reach every published site at once.
Built in, not bolted on
Tenant isolation
Every record belongs to an organization. No request can read or change another customer's data.
Roles and permissions
Owner, admin, editor and viewer roles decide who can publish, edit or only view.
Encrypted secrets
Integration credentials are encrypted and stored apart from content. Never logged, never exposed.
HTTPS everywhere
Every site and every custom domain is served over TLS, with certificates managed automatically.
Secure sessions
HttpOnly, secure cookies and CSRF protection on every state-changing request.
Rate limiting
Sign-in, forms and AI requests are rate-limited to stop abuse before it reaches your site.
Input validation
Every change is checked against a schema. Parameterised queries prevent SQL injection.
Audit logs
Sign-ins, publishes, connections and admin actions are recorded. Admins never edit customer content silently.
Managed database
Managed PostgreSQL with encryption at rest, private networking and automated failover.
Backups
Automated daily backups with point-in-time recovery for the platform database.
Protected AI keys
Model provider keys stay on the server. Browsers and templates never see them.
Atomic rollback
Deployments switch in a single step, and any previous version can be restored instantly.
AI with guardrails
We never send a prompt straight to production. Every request passes through the same controlled pipeline — and an invalid proposal is rejected before it touches your site.
- Your prompt→
- AI Gateway→
- Template context→
- Language model→
- Structured changes→
- Schema validator→
- Preview→
- Your approval→
- Publish
Invalid proposals are rejected at the validator. Your existing website is never modified.
Found a vulnerability?
We welcome responsible disclosure. Email [email protected] with details and we'll respond within two business days.