Safe by default, not by checklist.
A website takes files, form answers and changes from many people. chx4 web checks each of them, so the safe way of doing things is simply how it works.
Every file is scanned
Images and documents, files sent through forms and whole-site imports are all checked for malware before they're stored. Uploaded SVG images are cleaned of anything that could run.
Your domain, proven
A domain is only connected once you've shown it's yours. Both addresses are served over HTTPS, with certificates we issue and look after.
Least privilege
Permissions are granted one at a time. Writing, approving, publishing, archiving, exporting and resetting are separate rights.
Drafts stay private
Only signed-in members of your team can preview a draft. Visitors only ever see what you've published.
A full history
Every version of every page, block, template, menu and form is kept, along with who changed it and when it went live.
No surprise scripts
Custom page scripts are off unless we switch them on for your site, so content can't quietly add code to your pages.
Forms that resist bots
New forms ask for a captcha, and submitted answers are escaped before they're shown on a page.
Your password rules
Set the password policy your team's accounts have to follow.
Imports checked first
An import is checked for completeness before anything is replaced. An incomplete archive is turned away and your site is left as it was.
See your own site in the designer.
Give us 30 minutes and we'll build one of your pages with you, live: blocks, a menu and a working form, ready to publish by the end of the call.