# Network Administrator Guide - Pædagog Portalen

## About Pædagog Portalen

**Website:** https://paedagogportalen.dk  
**Purpose:** Educational platform for Danish pedagogues, teachers, and social workers  
**Category:** Educational Technology / Professional Development  

## Site Classification

- **Type:** Educational Platform
- **Language:** Danish (Denmark)
- **Target Audience:** Educational professionals working with children
- **Content:** Pedagogical activities, teaching materials, scheduling tools
- **Business Model:** Free educational resource (non-commercial)

## Technical Details

### Hosting & Infrastructure
- **Platform:** Lovable (lovable.app)
- **SSL Certificate:** Let's Encrypt (Valid)
- **CDN:** Cloudflare
- **Database:** Supabase (Educational use)

### External Connections Required
The following domains need to be whitelisted for full functionality:

#### Essential Services
- `paedagogportalen.dk` - Main website
- `*.lovable.app` - Hosting platform
- `*.supabase.co` - Database and authentication
- `fonts.googleapis.com` - Web fonts
- `fonts.gstatic.com` - Font assets

#### Optional Services
- `js.stripe.com` - Payment processing (if premium features are used)
- `images.unsplash.com` - Stock images for activities

### Security Measures

#### Implemented Security Headers
- Content Security Policy (CSP) - Restrictive
- X-Frame-Options: SAMEORIGIN
- X-Content-Type-Options: nosniff
- X-XSS-Protection: 1; mode=block
- Strict-Transport-Security (HSTS)
- Permissions-Policy (restrictive)

#### Data Protection
- GDPR Compliant (EU/Danish law)
- Row Level Security (RLS) on database
- Encrypted data transmission (HTTPS only)
- No tracking cookies without consent
- Privacy policy available at: https://paedagogportalen.dk/privacy-policy

## Whitelisting Guidelines

### Recommended Approach
1. Allow access to `paedagogportalen.dk`
2. Add to "Educational/Professional Development" category
3. Whitelist required external domains listed above

### For Strict Networks
If your organization has very strict policies, you may need to:
1. Review our privacy policy and terms of service
2. Contact us at kontakt@paedagogportalen.dk for additional documentation
3. Request a security assessment report

## False Positive Classification

### Why This Might Be Flagged
Some security scanners may incorrectly flag educational platforms as "grayware" due to:
- New domain reputation
- Use of modern web technologies
- Interactive features (file uploads, user accounts)
- Connection to cloud services

### Verification Steps
1. Check our security.txt file: https://paedagogportalen.dk/.well-known/security.txt
2. Review our privacy policy: https://paedagogportalen.dk/privacy-policy
3. Verify SSL certificate and security headers
4. Contact us for additional verification if needed

## Support & Contact

**General Contact:** kontakt@paedagogportalen.dk  
**Security Contact:** security@paedagogportalen.dk  
**Website:** https://paedagogportalen.dk/about  

**Response Time:** We typically respond within 24 hours during Danish business hours.

## Compliance & Certifications

- GDPR Compliant (EU General Data Protection Regulation)
- Danish Data Protection Act compliant
- Educational content standards compliant
- Accessibility guidelines (WCAG 2.1) in progress

---

*This document is maintained by the Pædagog Portalen team and updated regularly. Last updated: January 2025*

---

## For IT / Web Filter Administrators

If `paedagogportalen.dk` is being blocked or shows as "Uncategorized", please verify or submit a re-categorization to **Education / Reference & Education** with your filtering vendor. The domain is a legitimate Danish educational platform.

Public reputation lookups and re-categorization forms:

- Cisco Talos: https://talosintelligence.com/reputation_center
- Zscaler: https://csi.zscaler.com/
- Forcepoint: https://csi.forcepoint.com/
- Fortinet FortiGuard: https://www.fortiguard.com/webfilter
- Palo Alto Networks: https://urlfiltering.paloaltonetworks.com/
- Trellix / McAfee: https://sitelookup.mcafee.com/
- Symantec / Broadcom WebPulse: https://sitereview.symantec.com/
- Sophos: https://sophos.com/support/contact-support/web-filtering.aspx
- Webroot BrightCloud: https://www.brightcloud.com/tools/url-ip-lookup.php
- Kaspersky OpenTIP: https://opentip.kaspersky.com/

Additional trust signals available on the site:

- `https://paedagogportalen.dk/.well-known/security.txt` (RFC 9116)
- `https://paedagogportalen.dk/humans.txt`
- `https://paedagogportalen.dk/sitemap.xml`
- `https://paedagogportalen.dk/robots.txt`
- Schema.org `EducationalOrganization` JSON-LD in the page `<head>`
