Preview URLs and custom domains are served over HTTPS where configured through the platform.
Security
Security without pretending publishing is magic.
HostLuma.app is designed to hide server setup from customers while still making the important hosting controls visible: SSL, publishing status, logs and domain state.
Platform controls
What is included.
Customers do not need manual file uploads, shell access or server-path changes for the intended workflow.
Applications are hosted as separate customer-facing sites rather than mixed into one public website.
Disclosure
Responsible disclosure.
If you believe you have found a security issue affecting HostLuma.app, contact support@hostluma.co.uk with enough detail to reproduce the issue. Do not access customer data, disrupt service or perform destructive testing.
A useful report includes the affected URL, expected behaviour, observed behaviour, reproduction steps, browser or tool details and any relevant timestamp. Please keep testing limited to your own account and sites.
This page avoids unsupported claims about uptime, certifications or audit status. Those should only be added when they are formally available.