Hosting on our own infrastructure

Our own hosting
and maintenance,
managed together

We host websites, online stores and applications on NVMe storage in our own SIDECUBE data centre. We manage the project and its infrastructure together: performance, protection, monitoring and recovery. Hosting is available exclusively for projects managed by our team.

Request a review All services

What we focus on

Own infrastructure: The website and the hosting environment are administered together.
Continuous monitoring: Availability and resources are pursued for interventions.
Retrieval ready: Backups and restoration procedures adapted to the website.
Controlled access: Protections and permissions established for management areas.

Your website and infrastructure, managed by one team

We offer a complete ecosystem for the operation of the website: hosting, storage, network, protection, backup and maintenance, coordinated by the same team. Technical access is restricted and the configuration is documented and adjusted after the platform and use.

Server administration remains at SIDECUBE, without hosting accounts with cPanel or similar panels. Editing the content shall be determined separately by the roles of the platform.

Individual configurationWe adjust resources, processes and cache by platform, traffic and important functions.
Verified updatesWe plan the changes, and we check the forms, the controls, and the integrations affected.
Backup and restorationWe keep backups in multiple locations and check integrity and restoration, according to the project plan.
Monitoring and interventionWe correlate alerts with application and infrastructure status; interventions follow agreed support conditions.

High performance own infrastructure

Our own data centre, managed directly by our team

We manage directly the infrastructure that hosts websites and applications: servers, NVMe storage, monitoring, backup and protection.

We size the resources and adjust the caching, the software versions and the security measures according to the project. The same team coordinates hosting, maintenance and performance optimisation.

Efficient distribution of traffic for constant performance and high uptime.

LIVE

1 ACTIVE SERVER

NODE-01ACTIVE / TRAFFIC

NODE-02STANDBY

NODE-03STANDBY

Enterprise ServersStrong infrastructure, dimensioned for speed, stability and intense traffic.
NVMe storageWe use NVMe storage, alongside resources and cache adjusted for application, for quick access to files and data.
Smart load balancingWe distribute traffic between the resources available for constant performance and high availability.
Quick scalingResources can be adjusted according to traffic, use and project growth.
Advanced securityEach website or app has a dedicated firewall policy and WAF rules set up separately, adapted to its functions, URLs and integrations.
Backup and redundancySafety copies are kept in multiple locations. We check data integrity and restoration; frequency and storage are set for each project.
Monitoring 24 / 7Automatic monitoring follows availability, resources, security events and WAF. Alerts and logs provide a context for investigating incidents.
Dedicated configurationSettings adapted to each project: resources, caching, software versions and performance optimizations.

Continuity from power supply to application

Batteries and generator for supply, connections from several suppliers and a controlled access route. Public traffic is filtered before it reaches the website or app.

Visitor
Access the public website.
Protection and routing
Traffic is taken over and filtered before application.
Site or app
The pages shall be delivered and the necessary operations carried out.
Internal services
Databases and cache, according to project needs.

Batteries and generatorThe supply of the infrastructure is supported by batteries and generators, for continuity on network power outages.

Multiple connections and dedicated IPsWe have connections from several internet providers and dedicated IP addresses. The network configuration shall be determined according to the project needs.

Managed security

Prevention, detection, monitoring and recovery, coordinated by SIDECUBE. Protection combines network, servers and application; active measures and exceptions shall be established and verified for each project.

Transit applications

Filtered traffic

DDoS and HTTPS protection: We filter unwanted traffic, reduce the impact of DDoS attacks and use HTTPS for protected connections. The measures shall be adapted to the exposure and needs of each project.
Application Firewall (WAF): We also use WAF rules based on OWASP recommendations to filter the attempts of SQL injection, XSS and unauthorized access. The protection complements updates and remediation of vulnerabilities in the application.

Rules by platform

Application-adapted protection: We adjust security measures after the platform and its functions. We are checking forms, orders and integrations so that legitimate operations can continue safely.
Controlled public access: We limit access points that are not necessary and we check the source of the applications. We reduce the exposed area and keep relevant information to investigate unauthorised access attempts.

Browser and server

CSP and browser protections: Policies such as CSP and HSTS help to verify uploaded resources and use protected connections. We adapt them to the project and check the compatibility with the website's functions.
Servers with controlled access: Firewall for server and protection against repeated attempts at authentication limits unauthorized access. Administrative restrictions, access records and security updates support the controlled operation of the infrastructure.

Applications and data

TLS separation and encryption: We separate access and project permissions and use TLS encryption for service connections. Data shall be accessible only to authorised components and persons as required by the application.
Authentication and permissions: User access follows their roles and responsibilities. Protection of authentication, follow-up of important operations and additional access checks shall be chosen according to the platform and project risks.

Detection and alerts

Antivirus and malware scans: We regularly check the files to identify the suspicious elements, and we're looking at the completion of the checks. Detection and error are analysed and possible interventions are prepared with the possibility of recovery.
Monitoring with alert: Automatic monitoring shall follow the availability, behaviour of services and events relevant to security. Alerts help identify incidents and investigate causes; interventions follow agreed support conditions.

Recovery and maintenance

Safety copies: We keep copies of files and data in separate destinations with rules of storage and recovery procedures. We're checking the execution of the backups, their integrity and restoration, as planned for the project.
Verified changes: We review vulnerabilities and plan updates with tests, backups and the possibility of a comeback. We document the interventions and check the affected functions before we consider the change completed.

When we take over, we document active protections, additional options and recovery checks. The configuration, licences and intervention conditions are part of the project management plan.

Choice

Configuration suitable for each project

Websites, shops and applications use infrastructure differently. Hosting and administration shall be configured together after operations to be supported.

Business website

Best suited when: pages and forms must be fast and available.

Keep in mind: caching for public pages must not interfere with enquiry submissions or administration.

Online shop

Best suited when: orders, payments and integrations support commercial activity.

Keep in mind: the cart, authentication and checkout must preserve the correct data for each user.

Web application

Best suited when: there are accounts, roles, data and specific operations.

Keep in mind: permissions, background services and integration require their own checks.

Additional protection for administrative areas

On request, we offer dedicated VPN for selected areas, keeping the public website accessible. Options, compatibility and costs shall be determined per project.

VPN with revocable individual access; authentication in the application remains necessary.
MFA, CAPTCHA and rate limits for automated login attempts, depending on the platform.
Role accounts, controlled sessions and access from approved networks where appropriate.
Access logs and a recovery procedure for loss of the authentication device or factor.

Onboarding and migration, with checks at every stage

Full administration requires direct environmental control. Therefore, taking over from another supplier includes migration; for new projects, initial configuration replaces transfer.

Technical assessment
We inventory the platform, data, integration and risks. We confirm the compatibility and the necessary work.
Preparation and backup
We prepare the destination, backups and rollback steps.
Transfer and checks
We move the project and test the pages, authentication, forms and orders, according to the agreed scenarios.
Activation and monitoring
We plan the public cutover and final data synchronisation, then monitor operation.
Continuous maintenance
We document the configuration, we adjust on the basis of the use and we apply the administration plan.

The domain, DNS records and external services are inventoried separately. Downtime and data synchronisation are planned around the platform and how it is used.

E-mail is purchased separately. SIDECUBE does not provide hosting for email. The service is contracted from Google Workspace, Microsoft Exchange Online, Proton Mail or another chosen supplier; the DNS configuration is coordinated to maintain its operation.

Requests a migration assessment

Services for administration and operation

Details of take-over, maintenance and protection. The testing and automation of launches are related services defined separately in the offer.

Hosting and maintenance

Protection and continuity

Infrastructure and operations

Recommended pages

Pages related to this type of service: technologies, fields of activity, guides and complementary services.

Industries

Ecommerce and retail

Complementary services

Frequently Asked Questions

Before we begin the project

Hosting, taking over and administration conditions.

01 / Hosting

Hosting and access

Can you just buy the hosting space?

Hosting in SIDECUBE’s own data centre is provided exclusively alongside technical management of the project. The same team manages the website and infrastructure.

How is the content of the website administered?

Pages, products or articles may be edited according to the established platform and roles. Access to content is separate from technical access to the server; we do not provide hosting accounts with cPanel or similar panels.

Why is migration needed from another supplier?

Full management requires control over configuration, cache, data, protection and backups. On an external hosting, these interventions can be limited. The initial assessment or an independent audit may precede the migration decision.

02 / take-over

Migration and take-over

Can another team's website be taken over?

Yes, after assessing the compatibility and technical condition. The necessary remedies and adaptations are explained before the project is accepted and included in the proposal.

Does migration involve a disruption?

Depends on the platform, the DNS and the update of the data. We plan the transfer window, the final synchronization and the possibility of a return, to limit the impact on visitors and operations.

Does hosting include e-mail?

No. SIDECUBE does not provide hosting for email. Subscription is purchased separately from Google Workspace, Microsoft Exchange Online, Proton Mail or another chosen supplier. We inventory DNS records so that the website will be moved to keep the e-mail service running.

03 / Operation

Protection and support

Can administration be accessible via VPN only?

On request, we offer dedicated VPN for the selected areas after verification of compatibility. The public website remains accessible; the authentication and permissions of the application are kept. MFA and protection against automatic testing may complement the configuration with options and costs agreed separately.

How are the backups set?

We keep backups in multiple locations and check integrity and restoration. The frequency, destinations, retention period and recovery requirements shall be established for the project.

Does each website have its own protection rules?

Yes. Each website or app has a dedicated firewall policy and WAF rules configured separately, according to functions and integrations. Automatic monitoring of availability and security is ongoing; interventions follow agreed support conditions.

What happens in an incident?

Alerts help identify problems, and the team investigates the affected components. The support intervals, response times and interventions included shall be those in the service agreement.

Our own hosting and maintenance, managed together