This page outlines how NAROX.NZ ("NAROX") approaches the security of our infrastructure, systems and customer data. Security is not a one-time effort — it is built into how we design, operate and maintain our services.
Infrastructure Hardening
Our servers and services are configured with security in mind, including:
- Firewalls and network segmentation to limit exposure;
- SSH keys and strong authentication in place of passwords where supported;
- Regular security updates and patching;
- Access control reviewed and limited to what is required;
- Encryption in transit (TLS) across our web-facing services.
Data Protection
We take regular backups of qualifying hosted services and apply encryption where appropriate. You remain responsible for keeping your own, separate backup records of critical data, as set out in our SLA and Terms of Service.
Network Security and Performance
NAROX utilises CrowdSec and Cloudflare as part of our security and privacy stack across our network-facing services.
CrowdSec provides community-powered, behaviour-based threat detection, automatically blocking malicious traffic such as brute-force and scanning activity while staying respectful of legitimate visitors.
Cloudflare provides network security, privacy protection, DDoS mitigation and caching at the edge, which speeds up delivery of our site and helps protect against malicious traffic before it reaches our origin. By routing through Cloudflare, we also help hide our origin infrastructure and reduce direct exposure to attack.
These services operate under their own applicable terms and privacy policies. Where they collect limited technical data (such as IP addresses) for security purposes, we treat that information in accordance with our Privacy Policy.
Your Responsibilities
You play an important part in keeping your account and services secure. Please:
- Use strong, unique passwords and enable two-factor authentication where available;
- Keep your login credentials and API keys confidential;
- Notify us immediately at [email protected] if you suspect unauthorised access to your account;
- Keep your own applications, plugins and content updated and patched.
Incident Reporting
If you believe there is a security vulnerability in our services, or if you have a security-related incident, please report it privately and promptly to [email protected]. We will acknowledge your report and keep you updated as we investigate and respond.
No Absolute Guarantee
No system is completely secure, and no method of transmission or storage is 100% secure. We apply commercially reasonable measures to protect our services and your information, but we cannot guarantee absolute security.
Contact Us
For security enquiries, contact [email protected] or (+64) 022 598 7803.