At ExtremeVPN, the deployment of infrastructure and applications is fully automated, which removes the human element in the process. Also, we enforce international security benchmarks as part of the security baseline configuration. Moreover, we use an automated configuration management tool to deploy hardened images. Our firewalls are configured to block traffic by default, and only intended traffic and authorized protocols are permitted after the change assessment process. We have a dedicated workstation to access production systems hardened for specific tasks. As a result, we can provide the best services to our users with high-quality security assurance. Note that all services and operations function under the least privilege model to prevent attack surface. As part of the configuration baseline, we monitor agents to ensure the integrity of critical files. Our web architecture is segregated, and the website servers do not host data or access databases. We built interactions by applying API gateways to limit access to only intended data views. Also, allowing little consumer interaction with business logic helps to reduce the attack surface further.