Network hardening

Defensive security work covers authorized assessments, least-privilege access, and network hardening. Administrative interfaces are kept separate from public services. Many services use Cloudflare ZTNA; their addresses remain private.