Cadreweb.ch
Security
Appropriate protections, explicit responsibilities and practical checks. No website is invulnerable.
Administration restricted to approved emails
Optional administration is configured for client-approved email addresses. Identity is verified through the agreed login method and permissions are checked on the server, including APIs. Additional people require agreement. Content-editor access is separate from infrastructure-account access.
Forms and data
Server validation, request limits and spam protection can be applied. Collect only necessary information; define providers and retention for each project.
Secrets and accounts
Private credentials stay on the server. Access is limited by role and clients control their accounts. Do not send passwords through a project form.
Checks and recovery
Agreed checks cover HTTPS, configuration, applicable dependencies and services. Automated scans help identify issues but are not complete security audits. Backup and recovery arrangements depend on the project.
After launch
Without care, responsibilities are handed over. With care, checks, alerts and response availability are defined in the agreement. Automated monitoring is not permanent human availability.
Maintenance and temporary suspension
Separately scoped options: show a notice while keeping the site available, replace public pages with a maintenance page, or temporarily suspend public access. Authorised operators, accessible pages and form behaviour are agreed before installation. Other custom features and integrations are assessed individually.
Editors and private areas require separate scoping. They are not automatically included in the starting price.
Understand handover and accessPrepare your next step
Your next website
starts with a conversation.
Describe your business and what you need. We will clarify scope and availability before preparing a quotation.