The platform runs in a shielded virtual network at StackIT. All traffic passes through stateful firewalls that block everything by default and open only the necessary ports, and virtual networks are isolated from one another per project. This provides protection at the network and transport layers.