Security and Access Controls Overview

Author:Lars Nyström
Updated:Aug 21, 2025

Esadax provides a comprehensive security and access model designed to help teams build, deploy, and scale securely. This section introduces the major components that make up the security infrastructure, including access control, deployment protection, identity management, and encryption.

Whether you're a developer, security engineer, or team admin, this guide will walk you through each layer of security available in Esadax — from user authentication to secure backend connections.


What's Covered

This guide is organized into a step-by-step structure. You can explore each topic in order or jump directly to sections relevant to your use case.

01. Shared Responsibility Model

Learn how security responsibilities are divided between Esadax and your organization.

02. Access Control

Understand how users and teams are granted permissions within the platform.

03. Directory Sync + SAML + OIDC

Set up SSO and automate user provisioning through identity providers.

04. Protecting Git and Previews

Control who can access source code, deployment previews, and shared links.

05. Mitigation and Firewall Features

Explore DDoS protection, IP blocking, and the Esadax firewall for runtime safety.

06. Secure Backends & Protected Deployments

Ensure that your deployments and backend resources remain protected under all conditions.

07. Data Security

Configure encryption and retention policies for compliance and safety.


How to Use This Guide

If you're just getting started with hardening your Esadax setup, we recommend going through the articles in order. They follow a natural progression from identity and access to deployment-level protections and finally data-level security.

Each article contains:

  • A clear purpose
  • Configuration examples
  • Best practices
  • Related tooling or automation options

You can also use this as a reference — jump to the final article for a complete config breakdown.