Skip to content
Brova Cloud home
Under attack?

Brova Cloud / Security

Security and reliability

What we do to keep sites safe and online, what depends on Cloudflare, and where your data lives. Security here means reducing risk in layers: no host can promise that nothing ever gets through.

Access to our servers

Access to the hosting server uses SSH keys only. Password logins and direct root logins are switched off, and repeated failed attempts are blocked.

On every site

  • One user per site

    Each site runs under its own system user and PHP pool, so one site can't read another site's files.

  • Key-only SSH

    Server access by SSH key only. No password logins, no root login.

  • fail2ban

    Addresses behind repeated failed logins to the server are blocked automatically.

  • Weekly malware scan

    Linux Malware Detect scans every site's files once a week.

  • Automatic security updates

    Operating-system security patches on the hosting server install without waiting for us.

  • Audit logging

    auditd records administrative actions on the hosting server.

Layer by layer

Cloudflare filters traffic before it reaches our servers. We recommend it for most sites and set it up at launch; sites on our own nameservers get the server-side protections only.

  • Every siteapplies to every site we host
  • With Cloudflareapplies to sites behind Cloudflare
  • On requestset up when a site needs it

Your domain resolves to the right place.

Every site

Cloudflare DNS, or our own nameservers at ns1/ns2.brova.cloud.

Backups

Weekly backups on every plan, with extra snapshots for sites that need them. We confirm the schedule for your site during onboarding.

Uptime target

We aim for 99.95% uptime per month for each site, excluding announced maintenance. It's a target, not a contractual guarantee: every site currently runs on a single physical server, and we'll only offer an SLA once there is a standby to back it.

Where your data lives

We don't claim a compliance status we haven't had validated. Here is how data is handled today.

  • Hosted in the EU by default, on Hetzner servers. Other regions on request.
  • Providers involved: Hetzner (servers), Cloudflare (DNS, CDN and security, for sites that use it) and Resend (outgoing email).
  • Backups follow the schedule above.
  • Server logs are rotated and kept for incident review, then deleted.
  • This website uses no analytics and sets no cookies.