How WinguLab keeps your labs safe

01A fresh server for every session

Each lab, exam and ticket starts a new virtual machine from a clean, known-good image. When your session ends, the machine is deleted. Nothing you do carries over to another learner, and nothing from another learner reaches you.

02Isolated from the internet and from each other

Lab machines have no internet access. They can reach only our private package mirror, so you can still install software. Network rules block traffic between lab machines, and every machine is checked for those rules before it is handed to you. If the check fails, you never get the machine.

03Fair limits on every machine

Each lab machine has its own disk and input/output limits, so one busy lab cannot slow down anyone else's.

04Tested every day

An automated test starts throwaway machines each day and tries to get past the isolation. If anything gets through, new labs are paused automatically and we are alerted.

05Your account

• All traffic to wingulab.com is encrypted with HTTPS.
• Passwords are never stored in plain text.
• Repeated failed sign-ins are blocked for a while.
• New accounts confirm their email address before signing in.
• Idle sessions sign out automatically.

06Payments

Checkout is handled by Stripe, a certified payment provider. Your card details go straight to Stripe. WinguLab never sees or stores your card number.

07Separate systems

The website and the lab servers run on separate machines, connected through an encrypted private tunnel. The web application runs without administrator rights.

08Your data

We keep what we need to run your account: your username, email address, progress and results. Lab machines hold only what you type into them, and they are deleted after each session. Details are in our Privacy Policy.