Protection playbook

Staff access hardening playbook

Keep privileged website and hosting access controlled as people join, move and leave.

How it works

A ready-made response you can adapt.

Start with safe defaults, then tune thresholds and notifications for your website.

1

Inventory access

Identify admin, hosting, DNS and deployment permissions.

Use playbook →
2

Apply least privilege

Grant only the access required for the role.

Use playbook →
3

Review continuously

Alert on dormant, excessive or unowned access.

Use playbook →
Safe deployment

Test before the playbook acts on live traffic.

Every control includes dry-run visibility and a clear audit trail.

  • Preview modeSee what would be blocked before enforcing.
  • Human approvalRequire sign-off for high-impact actions.
  • Rollback controlsReverse changes quickly if needed.
  • Evidence retainedKeep the full timeline for review.
Start protecting today

Deploy this protection playbook.

Connect your website, review the rules and publish when you are ready.

✓ No card to start✓ First scan in minutes✓ Human support✓ Cancel anytime