Security

1. Overview

We design Hoskes Hoster with security in mind: HTTPS by default, HttpOnly session cookies, encrypted credentials in transit, and access controls on accounts.

2. Your responsibility

You are responsible for securing your account password, not sharing credentials, and only inviting trusted friends.

Use strong passwords and report suspicious activity promptly.

3. Report a vulnerability

If you discover a security issue in Hoskes Hoster infrastructure, please report it responsibly to security@hoskes.com.

Include steps to reproduce, impact assessment, and your contact details. Do not publicly disclose before we have had reasonable time to respond.

4. Incidents

If we confirm a security incident affecting customer data, we will notify affected users and authorities as required by law.