Platform Security

Security is built into the fabric of the Lonch platform. We leverage AWS's world-class infrastructure to ensure your code, secrets, and data remain isolated and protected.

Isolated Container Builds

We do not run builds directly on shared VPS instances. Every build triggered on Lonch is executed inside a temporary, completely isolated Docker container using AWS CodeBuild. Once the build finishes and the image is pushed to AWS ECR, the container is destroyed, ensuring zero cross-contamination between tenants.

Secrets Management

Your environment variables and application secrets are encrypted in transit and at rest. During deployment, they are securely injected directly into your AWS ECS Task Definitions, meaning they are never exposed in plaintext logs or accessible by unauthorized services.

Network Security

All applications are deployed behind an AWS Application Load Balancer (ALB) and routed via our Caddy reverse proxy. We automatically provision and renew Let's Encrypt SSL certificates for all your custom domains, enforcing HTTPS across your entire application surface.