Security

Best practices for securing your infrastructure

Security Overview

DarkAura takes security seriously. Our platform includes multiple layers of protection to keep your applications safe.

Built-in Protection

DDoS Protection

Automatic mitigation of distributed denial-of-service attacks

SSL/TLS

Free SSL certificates with automatic renewal

Firewall

Configurable network-level firewall rules

Encryption

Data encrypted at rest and in transit

Configure Firewall Rules

await client.firewall.setRules('srv_abc123', [
  { action: 'allow', port: 443, protocol: 'tcp' },
  { action: 'allow', port: 80, protocol: 'tcp' },
  { action: 'allow', port: 22, source: '10.0.0.0/8' },
  { action: 'deny', port: '*', protocol: '*' } // Deny all else
])

API Key Security

⚠️Never commit API keys to version control
⚠️Use environment variables for sensitive data
⚠️Rotate keys regularly and revoke unused keys
⚠️Use scoped keys with minimal permissions

Two-Factor Authentication

Enable 2FA for your DarkAura account in Dashboard → Settings → Security. We support authenticator apps and hardware security keys.