Wizard's Toolkit has files prepared for common cron job operations. By default the cron jobs are located in a /cron folder which is public on the webserver. You can (and probably should) move that to a non-public location on the server. Since Nginx, Apache and other webservers have different methodologies for calling CRON jobs, those details can be decided by your DevOps person.

To prevent calls from outside sources

These can easily be managed in the data table aptly named `wtkBackgroundActions`.