---
title: Securing websites
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

Security is an important factor in web development process. Ideally, security should be addressed at the beginning, before you even start planning and designing your projects. Reality though, is more complicated, and in many projects, security issues are considered after the development is done, right before deploying the website to a live environment.

![](https://docs.kentico.com/docsassets/13/securing-websites/Security_process_overview.png)

This may be problematic, as dealing with security problems may become expensive in later stages of the process. The first thing you should do, is to determine how secure your website should be and which security protections you will have to implement.

> **Note:** 
>
> ## [Design phase](https://docs.kentico.com/13/securing-websites/designing-secure-websites.md)
>
> Configure Xperience so that it is safe for users and protected against spam bots and malicious users.

> **Tip:** 
>
> ## [Development phase](https://docs.kentico.com/13/securing-websites/developing-secure-websites.md)
>
> See what you can do to secure your websites in the code. Utilize our secure coding recommendations and instructions on how to avoid vulnerabilities in code.

> **Info:** 
>
> ## [Deployment phase](https://docs.kentico.com/13/securing-websites/deploying-websites-to-a-secure-environment.md)
>
> Configure your server and project before deploying it to a live environment.

> **Warning:** 
>
> ## Security checklists
>
> After each stage, check whether you have addressed every important security issue:
>
> - [Security checklist - designing a website](https://docs.kentico.com/13/securing-websites/security-checklists/security-checklist-designing-a-website.md)
> - [Security checklist - developing a website](https://docs.kentico.com/13/securing-websites/security-checklists/security-checklist-developing-a-website.md)
> - [Security checklist - deploying a website](https://docs.kentico.com/13/securing-websites/security-checklists/security-checklist-deploying-a-website.md)