Security — Arcline Cloud

Container Isolation

Every application on Arcline Cloud runs in its own Docker container with strict security constraints applied by default:

Read-only filesystem — containers cannot modify their own image
Memory and CPU limits enforced per container
PID limits capped at 100 processes to prevent fork bombs
All Linux capabilities dropped
no-new-privileges security option enabled
Writable /tmp directory only, limited to 64MB with noexec flag

Network Security

All inbound traffic is proxied through Cloudflare, providing DDoS protection, Web Application Firewall (WAF), and bot management out of the box. Internal Docker network isolation ensures customer containers cannot communicate with each other. TLS 1.2 or higher is enforced on all endpoints.

Data Encryption

All data is encrypted in transit using TLS. Automatic SSL certificates are provisioned via Cloudflare for all custom domains at no additional cost. Database connections within the internal network are encrypted to protect data in transit between your application and its backing services.

Authentication

Arcline Cloud uses industry-standard authentication practices to protect your account:

bcrypt password hashing
JWT tokens with short expiry and refresh token rotation
TOTP-based two-factor authentication
Rate limiting on authentication endpoints — 20 attempts per 15-minute window

Infrastructure

Arcline Cloud runs on dedicated hardware rather than shared cloud VMs, giving us full control over the security of the underlying host. Our infrastructure includes:

Automated backups for all managed databases and application data
Systemd service management with automatic restart on failure
Log rotation and retention policies to prevent disk exhaustion and maintain audit trails

Responsible Disclosure

If you discover a security vulnerability in Arcline Cloud, please report it to [email protected]. We respond to all reports within 48 hours and will work with you to understand and address the issue before any public disclosure.

Compliance

SOC 2 Type II certification is currently in progress. All data handling is GDPR-compliant. For more information, see our Privacy Policy and Data Processing Agreement.