Skip to content

Operational security checklist

  • TLS on public hosts
  • Strong passwords and roles
  • Least-privilege API keys
  • HMAC on webhooks
  • Security banner clear of critical items