Docs / Networking

TLS certificates

Partial support

Default service URLs

{serviceId}.breachfix.com hostnames use Cloudflare Universal SSL on the operator's zone. No certificate action is required for customers using default URLs.

Custom domains

BreachFix Cloud v1 does not issue platform-managed certificates for domains on your own zone. You configure TLS at your DNS provider (Cloudflare Full mode, Let's Encrypt at nginx, etc.).

CAA records

If your domain defines CAA records, ensure your chosen TLS provider can issue certificates for the hostname.

See Custom domains and Cloudflare tunnel setup for operators.