Security & access

Secure by default, controlled by you

Hardening, access control and auditability built into every instance. Not a paid add-on you forget to switch on.

The biggest control of all

Your data never has to leave your servers

CICDoo orchestrates deployments over SSH on infrastructure you own. Your database, filestore and backups live where you decide, at the provider you chose, in the region you need.

Two-factor authentication

TOTP authenticator apps or email codes, plus one-time recovery codes so a lost phone never locks you out.

SSO sign-in

Continue with Google or GitHub, or email and password with a proper reset flow.

Network access control

Per-instance IP allow and deny lists so only the right people and systems reach your Odoo.

Rate limiting

Separate login and general request limits blunt brute force and abuse before they reach the app.

CSP, CORS & headers

Content-security-policy directives, CORS origins and X-Frame-Options, configurable per instance.

SSH-key authentication

Connect servers with private keys or CICDoo's public key instead of passwords.

Role-based access

Owner, admin and member roles plus per-resource, per-action permissions for every workspace member.

Session visibility

Last login and account history in plain sight, so anomalies stand out.

Automatic SSL

Certificates generate and renew automatically, with one-click re-issue when you need it.

More detail in the full feature list, or ask us directly.

Security questions before you commit?

Talk to an engineer about isolation, access control, data residency and your compliance needs.

Free plan, no credit card. Your servers stay yours.