> Would it be possible to host a single _bit_ on the web that I KNEW could not be hacked, exploited, MITM'd? If you don't accept or deal with any user input, t

> Would it be possible to host a single _bit_ on the web that I KNEW could not be hacked, exploited, MITM'd? If you don't accept or deal with any user input, third party websites or state maintenance; EG entirely static content. Then yes it is possible. But as soon as you start incorporating content that isn't static, like ads or scraping from another website/content, or user input or a database, then no. There are certainly ways to keep your security high and prevent most types of run of the mill exploits. It's a very broad area and entirely different methods of protection, based on say a cross site scripting exploit, server side forgery, or man in the middle attack. OWASP top ten - https://owasp.org/www-project-top-ten/ https://owasp.org/www-project-top-ten/ is a great resource to learn about website risk and how to improve your security.