SkillShield Protected operator access for the SkillShield control center

Commercial deployment posture

Separate the public door from the private control room.

This entry page exposes only sign-in, health, and public offer capabilities. The management console is served from a protected route after session validation.

What stays public

  • Public route: sign-in, health check, and localized offer API only.
  • Protected route: the full control center shell at /app.
  • Recommended hardening: TLS, reverse-proxy allowlists, MFA/SSO, and monitored admin identities.