Security & trust

Honest by construction, not by promise.

The same discipline that verifies a suspension on the wire runs through the rest of the platform: nothing is reported as done until it is, and your customers' service is never hostage to ours.

What is protected

Your account

  • Two-factor authentication — authenticator-app codes with recovery codes, and a trusted-device option.
  • Every staff member their own login — roles, invitations and one-time setup codes instead of shared passwords.
  • Sign-in protection — failed attempts are rate-limited per sign-in identity and per connection.

Your devices

  • Security scans & drift detection — one click audits ports, services and rules; safe fixes applied, the rest reported.
  • Uplink-safe — the port your internet arrives on can't be selected by mistake.
  • Verified on the wire — a refused or unanswered change is shown as exactly that.

Your customers

  • Paying customers stay online — outages, failovers and maintenance between us and your devices never cut a paid session.
  • Your money never passes through us — gateways settle to you.
  • Audit trail — console actions are logged: who did what, when, from where.

Status and disclosure

Platform status is published at app.access-core.org/status. Our Privacy Policy explains what personal data flows through the platform and why. Found something? Contact us — we would rather be correct than convincing.

Check for yourself.

Open a free account, connect a device, and watch the console refuse to claim what it cannot prove.