Security
Built so a lost password can't change your website.
Stylvia is designed around a simple rule: nothing reaches your live site without your confirmation.
Sign-in
- No passwords. Sign in with Google, or with a one-time code or link sent to your email.
- Secure sessions. Session cookies are HTTP-only and secure, and you can sign out everywhere at once.
Two-factor publishing
- Publishing, unpublishing and deleting a site always need a fresh second factor.
- Use an authenticator app (TOTP) with one-time recovery codes, or a code sent to your email.
Isolation
- Your site and its preview run on a separate domain from the Stylvia portal, so site code can never access your account.
- Previews use private, expiring links and are hidden from search engines.
Infrastructure
- Hosted on Cloudflare's global network, with automatic HTTPS, modern TLS and always-on DDoS protection.
- Every version of your site is stored immutably, so snapshots can't be silently altered.
- Account actions are recorded in an audit log.
AI and your data
Your site content is sent to the AI model you choose only to make the edits you ask for. We only route requests to US model providers that don't train on your data.
Report a vulnerability
Email [email protected]. We appreciate responsible disclosure and will respond quickly.