SFTP / SSH
Isolated per-site access and controlled terminal.
Hosting credentials do not receive root. Interactive SSH depends on the plan/license and is contained inside the site jail.
Clients
PuTTY and OpenSSH use the server-configured port; do not assume it is always 22 if the administrator changed the policy.
Jail
The environment exposes required file and terminal tools but should not provide a package manager, root access, or escape surfaces.