Trust & security
Security that starts with having less to break.
Your website carries your name. We protect it with a simple setup, careful access, and a few rules we don't bend.
How we protect your site
Security for a small business website is mostly about removing what can go wrong. Here's how we do it.
HTTPS on every site
Every site is served over HTTPS on both its www and non-www addresses. We issue certificates and renew them automatically.
Nothing to break into
Your site is served as finished pages. There's no admin login, plugin, or database on your public website for attackers to target.
Preview before publish
No meaningful change reaches your live site until you've reviewed a private preview and approved it.
Every version saved
Each approved version of your site is kept as a complete snapshot, so any version can be put back in one step.
Careful with form data
Submissions are saved before notifications go out, public form endpoints are rate-limited, and connections to other tools must use secure HTTPS addresses.
Private previews and personal logins
Preview links are hard to guess and expire. Each teammate has their own Account login, and access can be removed at any time.
No trackers added to your site
We don't inject advertising or tracking scripts into your customers' pages. Your site carries only what you've asked for.
Yours to keep
A complete export of your site is prepared after every approved change. Your domain stays registered to you.
Ownership is a security feature.
Businesses get sold, partners change, and providers come and go. A complete, portable copy of your website, in standard files any host can serve, means you're never stuck.
Your data, in plain terms
- Your website content is stored as versioned snapshots and served to your visitors.
- Form submissions are stored in your Account so you can review and download them.
- Payments are processed by our payment provider. We don't store full card numbers.
Read our Privacy policy and Terms of service.
Found a security issue?
Email hello@flagstage.com with “Security report” in the subject. Please include enough detail for us to reproduce it, and give us a reasonable chance to fix it before sharing it publicly.
Start with the site you already have.
Tell us where your website lives today. You'll create an Account next, and we'll start copying the real thing.
Moving in is included. Your current site stays up while we copy it.