My company is working on a new web app and it's website is developed by outsourced company (let's say under
beta.mydomain.com). Of course this site has some user-management mechanisms, but there are huge part of front-end, that are meant to be visible to even not-logged user.
Lately this beta site was leaked. What is the best way to protect that website while it is being under development? My goal is to protect that page/domain (i.e. via password) with lowest possible ingerention in the outsourced website's code (because it's still under dev).
I was thinking about some kind of wrapper-page (with logging mechanisms) and
.htaccess file that would check for redirection from that wrapper, but I wanted to ask first what is your experience in that matter? How can I achieve that?