AppSite Cybersecurity

How AppSite protects your platform.

Cybersecurity shows what AppSite scans, patches and tracks on your behalf — the register, the findings, and what was repaired. A finding here is executed, not filed: Repair runs the fix.

Open to everyoneSee what Cybersecurity doesOwners, IT leads and auditors. No account needed to look.StaffEnter Desk-liteCybersecurity on its own, once you sign in — the security programme AppSite runs for your company.

Platform compliance: loading…This host serves build 1.4.521 · every control on the Cyber Check record →

Sites and devices
13 listed · 0 run PHP · 9 can't tell · last checked by hand 2026-10-25

Every public site and server we run or host, refreshed nightly with read-only checks only (DNS, response headers, the hosting accounts we hold). Dedicated tenants are read and report only, never changed.

appsite.ca
Google App Hosting · envoy · Next.js · AppSite · we may change · x-powered-by says Next.js. (2026-10-25 (by hand))
runs PHP: no
social.appsite.ca
Google App Hosting · envoy · Next.js · AppSite · we may change · x-powered-by says Next.js. (2026-10-25 (by hand))
runs PHP: no
service.appsite.ca
Google App Hosting · envoy · Next.js · AppSite · we may change · x-powered-by says Next.js. (2026-10-25 (by hand))
runs PHP: no
products.appsite.ca
Google App Hosting · envoy · Next.js · AppSite · we may change · x-powered-by says Next.js. (2026-10-25 (by hand))
runs PHP: no
rvcity.ca
behind Cloudflare · cloudflare · unknown · RV City · read and report only · Server says "cloudflare" only; that does not show whether PHP sits behind it. (2026-10-25 (by hand))
runs PHP: can't tell
appsations.com
unknown · unknown · unknown · AppSite · we may change · Nothing readable from outside. (2026-10-25 (by hand))
runs PHP: can't tell
thatparentingcoach.com
unknown · unknown · unknown · tenant · read and report only · Nothing readable from outside. (2026-10-25 (by hand))
runs PHP: can't tell
suenocompany.com
unknown · nginx · unknown · Sueño · read and report only · Server says "nginx" only; that does not show whether PHP sits behind it. (2026-10-25 (by hand))
runs PHP: can't tell
mysttechcreations.com
unknown · unknown · unknown · tenant · read and report only · No answer when checked. (2026-10-25 (by hand))
runs PHP: can't tell
sdk.appsite.ca
classic Firebase Hosting · unknown · unknown · AppSite · we may change · Classic Hosting serves static files; the runtime is not readable from outside. (2026-10-25 (by hand))
runs PHP: can't tell
developer.appsite.ca
classic Firebase Hosting · unknown · unknown · AppSite · we may change · Classic Hosting serves static files; the runtime is not readable from outside. (2026-10-25 (by hand))
runs PHP: can't tell
Starlink router (home)
home · unknown · unknown · AppSite · we may change · Device; not yet read. (not yet read)
runs PHP: can't tell
Macs (home)
home · unknown · unknown · AppSite · we may change · Devices; not yet read. (not yet read)
runs PHP: can't tell

Who it’s for

Anyone who has to answer “are we safe?”

Owners

A straight answer to “are we safe?”

The register of what is scanned, the findings that are open, the repairs that ran — on one page you can read without an IT degree.

RegisterFindingsRepairs
IT leads

Repair runs the fix.

A finding is not just a ticket to file: Repair executes the fix where it can and records that it ran — code fixed on a repair branch, security rules tightened, the Home’s own words corrected.

ExecutionKey rotationRules
Auditors

The compliance suite, with evidence.

What was checked, when, and what happened next — a record you can hand over, not a promise.

ComplianceEvidenceHistory
The programme

Scan, find, repair — on a schedule.

Cybersecurity is the programme AppSite runs for every tenant: scheduled scans across the platform, findings with a severity, and repairs that execute rather than advise.

  • The register — what is scanned, and how often.
  • Findings — each with a severity and what it means for you.
  • Repair — runs the fix — and records that it did.
  • Key rotation — automatic every 30 days; AI and registrar keys escalate to a person.
  • Compliance suite — the checks, the evidence, the history.
  • Cyber Check — every module’s live Home read and checked against the code of the build serving it — a claim the app does not back becomes a finding.
  • CRA rules — each division’s GST/HST and PST checked nightly against the Canada Revenue Agency’s published rates — in Books and on the invoices it issued.
  • Agents — the human, AI and hybrid agents you assign to findings and patches.
  • Platform terms — each platform’s liability cap against your exposure, acknowledged and reviewed.
  • Tenants — every monitored tenant with its current risk score and open findings.
  • SOC 2 Roadmap — guides the company step by step through preparing for a SOC 2 audit.
  • Audit Log — records the actions taken in the module.

From a finding to a fix in three steps

Scanned, found, repaired.

Step 1 · Scan

The scans run on their own.

On a schedule, across the platform, against the register.

Scheduled
Step 2 · Find

A finding, with a severity.

What it is, how bad, and what Repair will do about it.

Severity
Step 3 · Repair

Press Repair. It runs.

The fix executes and the record says so.

Executed
Start

Cybersecurity comes with every plan.

The programme runs for every tenant on every AppSite plan; Enterprise adds the dedicated register and its own keys.

Read your security page today.

The register, the findings, the repairs — sign in and see what AppSite is doing for you.

Staff sign in →