Access
Sign in
Administration for pontelon.com is behind Cloudflare Access. There is no password to enter, and none stored on our side.
Administrators
Continue below and Cloudflare will verify your identity before the request reaches our servers. If your address is on the allowlist, a one-time code arrives by email and you land in the panel.
Continue to sign inAccess is restricted to a named allowlist. If you reach this page by accident, there is nothing here for you — and nothing you can guess.
Learners
Taking one of our courses? Sign in with your email address to save your progress and unlock each lesson in turn. There is no password: we email you a one-time link.
Sign in to your coursesCustomer accounts
There are none for our products yet, and we would rather say so than show you a sign-up form that leads nowhere. Our products are listed on the products page with their real status — none is generally available today, so there is nothing to sign in to.
When that changes, accounts will open here. Tell us what you are building and we will let you know when the product you care about is ready.
How this works
We do not run a login form, because a login form implies a password database, and a password database is a thing that can be stolen. This site has none.
- Cloudflare Access checks who you are at the edge, before a request reaches our application at all.
- It signs a short-lived token describing the verified identity, and forwards it with the request.
- We verify that token from scratch — signature, issuer, audience and expiry — and then check the email against a separate allowlist. Both have to agree.
Anything that fails is refused: a missing token, an expired one, a token minted for a different application, or a valid identity that is not an administrator. There is no path through this code that grants access when a check errors.
Lost access, or need another administrator added? Both the Access policy and the application allowlist have to be updated — one without the other will not work. Get in touch.