To harden your PEM deployment against attack, consider the following measures:
Ensure PEM, your operating system, and third-party libraries are regularly updated. Without the most recent security patches, your system is vulnerable to cyberattacks. See Dependencies to learn more about the system packages used by PEM.
Ensure the Postgres instance used as the PEM server is kept up to date and apply Postgres security best practices.
Configure the security settings of the PEM web application as appropriate.