Its own database
Your customers, invoices and settings live in a database that only your panel can reach.
$ cat security.md
How Tollgate keeps your panel separate
Every panel is its own copy, with its own database and sign-in, on servers kept apart from sudosecurity.org. Secrets are encrypted and write-only.
$ isolation
One panel, one copy, nothing shared
Every Tollgate customer gets a complete copy of the panel of their own, not a corner of a shared one.
Its own sign-in
Your customers' accounts exist only on your panel. They can't sign in to SudoSecurity or to anyone else's panel, and our accounts can't sign in to yours.
Its own servers
Customer panels run on servers kept apart from the ones that run sudosecurity.org, so neither can affect the other.
$ secrets
Keys and passwords stay locked
Encrypted at rest
Your Stripe and PayPal keys, SMTP password and game panel key are encrypted before they're saved.
Write-only
Once saved, a secret is never shown again, not even to your own admins. To change it, you enter a new one.
No card numbers
Cards are entered on Stripe's hosted checkout or on PayPal. Your panel only ever sees whether a payment succeeded.
$ operations
Run the way we run our own
Your panel gets the same care as clients.sudosecurity.org, where our own customers pay us.
Patched for you
Security updates for the panel and the server underneath it are applied by us.
Nightly backups
Your panel's database is backed up every night and stored away from the server it runs on. We test restores.
Locked-down access
Two-step sign-in for you and your customers, rate limits on sign-in, and an activity log of what your staff change.
What we can still reach: because we host and maintain your panel, our engineers can access its server. We only do so to keep it running, apply updates or fix a problem you report, and saved secrets stay encrypted.
Open your own panel
Tollgate is opening to early-access customers first. Email us and we'll set yours up as soon as it's ready. Nothing is charged until your panel is live.