Trust
Security
Harbor is a managed Laravel application platform. We keep the surface small on purpose.
Access
- Portal and API authentication via Logto (OIDC / JWT)
- Dedicated app SSH via Teleport Zero Trust (not public SSH)
- Secrets stored in Infisical; tenant paths isolated under Harbor folders
- Custom domains require Cloudflare proxy; origin firewall allows Cloudflare IPs only
Data ownership
You own your application code, database contents, and environment variables. On cancellation, apps enter a deprovision grace period so you can export data before removal. Contact support for export assistance during that window.
What we do not offer
- Root shell on shared apps
- Arbitrary host networking or custom load balancers
- Multi-region active-active (today)