When deploying an application to a production environment, the following security tasks are performed:
Delete the Unauthenticated access group: To prevent unauthorized access to the application.
Restrict access to ruleset configuration: Ensures only authorized users can make changes to the ruleset configurations, protecting the application from unintended modifications.
Update standard dynamic system settings: Ensure that all system settings are correctly configured for production, enhancing the application's security and performance.
Reference:
Pega Security Best Practices