Security

Security is not a settings page.

In Nodavik it starts with architecture: separate accounts, isolated services, controlled privileged operations and verification before trusting a result.

Separate accounts

Sites, PHP processes, databases and permissions are tied to the right project, reducing interference and cross-account access.

Limited privileges

The web panel cannot freely execute administrative commands. It can only request known, validated operations.

Verification and recovery

Backups and restores are checked. Sensitive updates can be tested on a separate copy.

Traceability

Important actions must leave a clear history that is useful to both users and diagnostics.

What is already real

The foundations have been tested on the server.

  • Separate identities and services for sites
  • Separate databases and permissions
  • Verified WordPress backups
  • Restore to an isolated copy
  • Updates tested before application
  • Separation between dashboard and administrative operations
Engine isolation

Core operations respect separate boundaries and identities.

Verified
Complete panel security

Authentication, sessions, login limits, permissions and request protection.

In development

Transparency before promises

The public panel does not yet expose administrative functions to end users. Access, sessions, permissions, request protection and secure secret handling will be completed and verified first.

Features that have not yet been certified remain disabled or read-only. A finished screen does not automatically make the underlying function ready.

Private alpha: Nodavik is still under development and should not be considered ready for external production servers.