Gostliery
View public security materials · Ask for private documentation
Gostliery is an AI-first hosting and domains platform. Key security features include TLS everywhere on public services, Web Application Firewall and CDN options, automated backups, account isolation, and security monitoring across the control plane.
Use this Trust Center to learn about our security posture and request access to private security documentation.
Featured documents
Payment card data is handled by PCI-DSS Level 1 compliant payment processors. Encrypted payment details are stored in an external vault separate from Gostliery application systems. See Payments for accepted methods.
Yes. Authority requests are routed to our privacy and security contacts, logged, and escalated to legal and leadership as required. Contact privacy@gostliery.com or use the Trust Center access request form.
We maintain incident response procedures and customer notification processes. For current status of an inquiry under NDA, request access via Get access on this page.
Yes. Security event logging and monitoring cover production control planes, authentication, and critical application events, with alerting for anomalous activity.
Our secure development and hardening practices align with OWASP Top 10 guidance and industry benchmarks for cloud hosting platforms. Detailed control mappings are available under private documents after access approval.
Security-relevant actions in gPanel and admin tools are logged for investigation and accountability.
Customer data is protected in transit with TLS and at rest with platform encryption controls.
Accounts support stronger sign-in options to reduce credential risk.
Automated backups and restore workflows help recover from accidental or malicious change.
Report vulnerabilities to security@gostliery.com. See our security reporting policy.
OpenChanges are reviewed, tested, and deployed through controlled release pipelines.
Dependencies and hosts are tracked for security updates on a prioritized schedule.
Live service health is published on the system status page.
OpenHosting runs on modern NVMe and LiteSpeed stacks with regional capacity. See Our Technology.
OpenEdge and network protections mitigate volumetric and application-layer attacks.
Web application firewalls and CDN options harden public sites and improve performance.
Privileged access is limited, reviewed, and monitored.
Retention follows product needs and legal requirements; see Privacy policy.
Data center partners maintain physical access controls for colocation facilities.
Cookie categories and choices are explained in the cookie preference center and Privacy policy.
OpenWe notify affected customers and authorities as required by applicable law.
privacy@gostliery.com handles privacy requests and DPA inquiries.
Endpoint protection is required on corporate devices with access to production systems.
Company devices that store customer-related data use full-disk encryption.
Security teams track emerging threats relevant to hosting and web platforms.
Distributed denial-of-service protections at network and application layers.
Production networks are segmented from corporate and development environments.
Public services require modern TLS for customer traffic.
Staff access follows role-based least privilege for support and operations.
Authentication and privileged actions generate audit trails.
Hosting accounts are isolated so customers cannot access each other’s data.
Security risks are assessed for major products and infrastructure changes.
Documented playbooks cover detection, containment, recovery, and communication.
Backups and multi-layer redundancy support recovery objectives for core services.
Agent and builder features are designed to help customers while respecting account boundaries and privacy settings.
Product AI features operate on customer content within the platform; we do not sell personal data for advertising models.
| Name | Additional details |
|---|---|
| Cloudflare | CDN, DNS, and edge security for public websites |
| Razorpay | Payment processing (when enabled) |
| Google Cloud / Workspace | Optional Workspace and cloud tooling |
| Transactional email provider | Transactional mail delivery for account and product email |
| AI model providers | Model APIs used by Agent and builder features under product terms |
Gostliery published this Trust Center so customers and prospects can review security posture, compliance highlights, and request private documentation.
Information security practices aligned with ISO/IEC 27001:2022 are described alongside Our Technology and Sustainability reporting.
Questions? Email admin@gostliery.com or request access.
Website enquiry — no signup needed. Call, voice, and account tools stay in gPanel. Full contact form
Ask about hosting, domains, email, migration, or sales. No account required.