Yes and yes! You control what products, attributes, and files are included in a brand portal in the first place, and you can also choose to password protect them.