> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bastion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Network security

> How Bastion protects its network with AWS VPC isolation, Cloudflare Zero Trust, a web application firewall, mTLS between services, and continuous monitoring.

## Network infrastructure

### AWS VPC

Bastion utilizes AWS VPC to isolate its resources and create a secure network environment, minimizing exposure to external threats while facilitating secure communication.

### Cloudflare Zero Trust

Access to internal systems and networks is granted based on user identity and context, greatly reducing the risk of unauthorized access.

### Web Application Firewall (WAF)

Bastion employs a WAF to protect applications from common web threats such as SQL injection and cross-site scripting.

***

## Network controls

### Ingress and egress management

Bastion meticulously manages ingress and egress traffic, ensuring that only authorized data flows in and out of the network, safeguarding sensitive information.

### Network access management

Robust policies control user permissions and access to critical systems, ensuring only authorized personnel can access sensitive resources.

### Mutual TLS (mTLS)

mTLS secures service-to-service communication, restricting interservice communication to predefined routes. This guarantees that network communication is trusted, secure, and well-defined.

### Continuous monitoring

Network monitoring is deployed to detect anomalies and potential threats in real-time, allowing Bastion to respond swiftly to security incidents.


## Related topics

- [Security architecture overview](/guides/security/overview.md)
- [API authentication overview](/guides/security/api-authentication.md)
- [Wallet key management](/guides/security/key-management.md)
- [Supported off-ramp payout countries](/guides/getting-started/supported-off-ramp-payout-countries.md)
- [Sandbox vs. production environments](/guides/getting-started/sandbox-vs-production-environments.md)