Enterprise-Grade Website Security

Pantheon’s containerized production environment is read-only. Code cannot be silently altered in production, helping block the drive-by plugin and file-drop path before it becomes a change on a live site.

Mandated version control across Dev, Test, and Live makes changes visible, reversible, and easier to compare against a known-good state.

When a new threat emerges, Pantheon applies protective rules across the platform while teams identify affected sites, communicate with customers, and support audit and cleanup work.

Each site runs in isolated containers, helping limit the impact of issues across applications and infrastructure.

Continuous checks across network, server, and application resources help surface issues early and provide a transparent record of platform status.

Managed TLS certificates help protect your site and visitors without adding certificate-management overhead.

Use SAML, SSO, and MFA to centralize authentication and support stronger access policies.

Role-based permissions let teams work where they need to—and limit who can deploy to live sites.

Automated, encrypted backups and dashboard restores give teams a dependable path back when recovery is needed.

Pantheon ensures process and memory-level isolation using control groups for memory, disk, CPU. Valhalla's encrypted distributed file system employs client-server authentication. Customer files are secured by Linux permissions, while system and customer logs remain isolated.

Pantheon maintains full redundancy for core components: API, edge routing, DNS, and file storage. Automated tools aid recovery. Services tolerate process/server failure. Multi-datacenter presence facilitates restoration. Redundant upstream providers enhance reliability.

Pantheon relies on trusted repos, validates packages, and audits changes on Linux servers. User software runs in isolated containers, preventing direct execution of uploaded files. ClamAV antivirus with updated databases is provided for customer use.

Pantheon’s primary data centers are managed by Google and feature a layered security model. This includes safeguards like custom-designed electronic access cards, alarms, vehicle access barriers, perimeter fencing, metal detectors & biometrics, and laser beam intrusion detection.

Pantheon grants access according to least privilege. Employees can interact with servers via a secure API without actual server access—when they do need it, SSH-key based authentication is used and activity is recorded in a central log.

Pantheon updates container hosts with latest kernel, OS, packages. Seamless migration to new instances, zero downtime. CMS updates and patches are internally tested and deployed via one-click workflow for customers.

Pantheon's agility swiftly addresses vulnerabilities (Heartbleed, Shellshock, GHOST). Fresh layers prevent exposure. Post-incident reviews enhance future responses. Significant disruptions updates can be found at https://status.pantheon.io/ and @pantheonstatus. 

Pantheon uses on-disk storage with hardware RAID, multiple disks. Automated backups offer further protection. Backups, over 99.99% durable, encrypted, stored in multiple datacenters, ensure availability.

Pantheon uses x.509-based authentication, encryption for network security. Edge routers tunnel traffic, prevent bypass. Host intrusion prevention for user-pw services, server layer stops unauthorized access. Centralized security logs retained for a year.