Trust & safety

Protecting every site you ship

We build Webstorio so you can ship sites and apps without babysitting infrastructure, while keeping accounts, projects, and customer data appropriately protected.

Report a security issue

How we protect the platform

Security is part of how we operate hosting, auth, and the builder — not an afterthought bolted on at publish time.

Encryption in transit

Traffic to Webstorio and published sites is served over HTTPS. Sensitive credentials are never stored in plaintext in application logs.

Account access controls

Authentication and session handling protect account access. Rate limiting reduces brute-force and abuse across auth and public APIs.

Project isolation

Projects and published sites are logically separated. Customer content is not shared across accounts; authorization is enforced server-side.

Abuse monitoring

We monitor for misuse and anomalous activity, and can suspend accounts that violate our Terms of Service or threaten platform safety.

Hardened infrastructure

We rely on reputable cloud hosting, CDN, and edge security providers (including Cloudflare) to help absorb attacks and keep sites available.

Responsible disclosure

Found a vulnerability? Email us. We appreciate good-faith reports and will investigate promptly. See our security.txt for contact details.

Privacy & processing

When you use Webstorio to collect data from your own visitors, you are the controller and we act as your processor under our DPA. Platform account and analytics data is covered by our Privacy Policy.

Common questions

Where is data hosted?: Webstorio is operated by PT Rasylva Digital Lestari in Indonesia and uses cloud infrastructure and subprocessors that may process data in other regions under appropriate safeguards.
What if there is a data breach?: If a personal data breach affects Customer Personal Data we process as your processor, we will notify you without undue delay as described in our DPA.
How do I report a vulnerability?: Email [email protected] with details and steps to reproduce. We do not currently offer a bug bounty, but we take reports seriously.

Ready to Launch Your Website?

Join founders and creators who are launching production-grade websites without the technical headaches.

Start Building Now