Request a demo

InfraLedger security

Your data stays on your infrastructure

InfraLedger is self-hosted by design. Applications, databases, logs and the audit log all live on servers you control, and nothing depends on a third-party cloud API.

Isolation

Enforced boundaries, not naming conventions

Organizations are the tenant boundary, and projects inside them get separate private networks. A workload in one project can't open a connection to another project's services.

Applications in one project can reach their own database. A connection from another organization's project is blocked at the network boundary.Organization A · project prodOrganization B · project webapipg-mainweballowedblocked
Each project has its own private network. Workloads can't reach another project unless you connect them.

Built-in controls

Security that's part of the platform

These controls apply to every organization and project. There's nothing to add on.

Tenant isolation

Each organization's resources are isolated from every other organization, and each project runs on its own private network.

Roles on every request

Owner, Admin and Member roles are enforced by the API on every call, not only hidden in the interface.

Audit log

Every deploy, restart, deletion, configuration change and admin action is recorded with the actor, time and outcome.

Encrypted secrets

Environment variables and service credentials are encrypted at rest.

Application firewall

IP allow-lists, basic auth and rate limits can be set for each application.

HTTPS by default

Every application gets a certificate from Let's Encrypt, renewed automatically.

Audit log

A complete record, stored where you choose

The audit log is kept in InfraLedger's own database on your servers. It records successful and failed actions, so you can answer who changed what, and when.

ETDLedger's security team can build threat detection on top of this record. See security services

acme / audit logFiltered: all actions
TimeActorActionResourceResult
12:41:07ci@example.comDeployed api #42apiRecorded
12:38:52admin@example.comScaled web to 3 replicaswebRecorded
12:31:15dev@example.comUpdated env var DATABASE_URLbillingRecorded
12:30:00systemBackup completedpg-mainRecorded
12:22:41ci@example.comDeploy #43 failed: build errorworkerFailed
12:19:03admin@example.comDeleted application staging-oldstaging-oldRecorded
12:12:48owner@example.comChanged role Member → AdminorgRecorded
Illustration of the InfraLedger dashboard

Network design

Reference network topologies

Patterns our engineers use when they design and review networks around InfraLedger. Each is adapted to your environment.

DMZApp zoneData zoneManagement network Internet FirewallEdge WAFRequest filtering Reverse proxyTLS termination FirewallInternal Applications Databases Bastion hostAudited access Admin VPN
Defense in depth: traffic passes two firewalls and a WAF before reaching applications, and data sits in its own zone.
Project A networkProject B networkProject C networkdenied UsersAny location Identity providerSSO and MFA Access proxyChecks every request billingApps and databases crmApps and databases analyticsApps and databases
Zero-trust access: every request is authenticated and checked, and project networks can't reach each other.
ServersSystem logs FirewallsConnection logs Network sensorIntrusion detection InfraLedgerAudit log Log collectorParse and enrich SIEMDetection rules AlertsOn-call, email, chat Security analystTriage and response
Monitoring: logs from every layer, including the InfraLedger audit log, feed one place where detections run.
Isolated lab networkYour production network Participants VPNPer participant Lab firewall DMZWeb services InternalServers, clients MonitoringSIEM, capture Live systemsno route
Lab isolation: participants reach the lab over VPN only, and the lab has no route to your live systems.

Access

Who can reach your platform

Only people you invite. ETDLedger staff have no access to your installation unless you grant it, for example for a support request, and you can revoke it at any time.

Found a vulnerability? Email hello@etdledger.com and we'll respond as quickly as we can.

Review InfraLedger with your security team

We'll walk your team through the architecture, controls and audit log.

Book a security review →