# Venue Security & Secure Websites — RedactLabs

> Source: https://redactlabs.ca/practices/venues/
> Machine-readable Markdown of this page (also served at this URL under `Accept: text/markdown`).

# For the rooms the public walks into.

Secure websites and right-sized security for Ontario venues and public-facing organizations — where one wrong VLAN puts the public on systems they should never reach.

## THE FIT

- **Segmentation-first design.** Tiers are isolated by default.
- **Senior-led delivery.** The engineer who designs it is the engineer you reach.
- **Cross-domain fluency.** Websites, network, and security under one team.
- **Identity-first access.** Zero-trust is the baseline, not the upsell.

## Three ways to buy.

### Secure Venue Website

Fixed-fee

A fast, accessible site on hardened hosting. No third-party sprawl.

### Zero-Trust Network Redesign

8–12 weeks

Tiered VLAN design, segmentation, identity-first access.

### Managed Security & Hosting

Monthly retainer · 12-month minimum

Ongoing coverage, quarterly reviews, Sentinel Watch™ monitoring, and a named engineer.

## What the work looks like.

Major Ontario venue · zero-trust network redesign.

- **Network**: Flat L2 → VLAN per tier
- **Operations exposure**: Reachable from public Wi-Fi → isolated
- **Post-cutover uptime**: 100% across four consecutive events

## Disciplines, not slogans.

- CIS Controls v8 IG2/3
- Zero-Trust principles
- NIST CSF 2.0
- PIPEDA & Law 25

## Common venue questions.

- **Can you give references?**: Yes, on request.
- **Will you work around our event calendar?**: Cutovers are scheduled around the calendar, not over it.
- **How is the public kept off our systems?**: VLAN-per-tier segmentation, identity-first.
- **Who do you contract with?**: Venue operators and the organizations inside them.

## The public is not your test environment.