/ features
In order to reduce security risks to a minimum, a holistic approach to security is required. Our security processes are born out of a clear definition of the threats to our system.
Our Security platform and process leverage multiple levels of security — consisting of Security Systems and Equipment, combined with Security Procedures and Practices and Auditing Processes — to ensure unparalleled security for all the services we provide. The platform tackles security at 7 different levels:
Our global datacenter partnerships are a result of a comprehensive due diligence process. Security and stability are two of the most important variables in this process. All datacenters are equipped with surveillance cameras, biometric locks, authorization-based access policies, limited datacenter access, security personnel, and similar standard security equipment, processes and operations. What separates us is that our due diligence also incorporates a measure of proactiveness demonstrated by the datacenter towards security, measured by evaluating past practices, customer case studies, and the amount of time the datacenter dedicates towards security research and study.
Our global infrastructure deployments incorporate DDoS mitigators, Intrusion Detection systems, and Firewalls both at the edge and the Rack level. Our deployments have weathered frequent hacking and DDoS attempts — sometimes as many as 3 in a single day — without any degradation.
Firewall Protection — Our round-the-clock firewall protection system secures the perimeter and delivers the very best first line of defense, using highly adaptive and advanced inspection technology to safeguard your data, website, email and web applications by blocking unauthorized network access.
Network Intrusion Detection System — Our network intrusion detection, prevention and vulnerability management system provides rapid, accurate and comprehensive protection against targeted attacks, traffic anomalies, "unknown" worms, spyware/adware, network viruses, rogue applications and other zero-day exploits, using high-performance network processors that carry out thousands of checks on each packet flow with no perceivable increase in latency.
Protection against Distributed Denial-of-Service (DDoS) Attacks — Denial of Service is currently the top source of financial loss due to cybercrime. Our DDoS protection system provides unrivaled protection by using sophisticated technology which automatically triggers itself as soon as an attack is launched, blocking almost all fraudulent traffic while allowing legitimate traffic through. These systems have protected websites from outages caused by attacks as large as 300+ Mbps.
Host Based Intrusion Detection System — Our Host-based Intrusion Detection System (HIDS) assists in detecting and pinpointing changes to system and configuration files, whether by accident, malicious tampering, or external intrusion, using heuristic scanners, host log information, and system activity monitoring — decreasing risk of potential damage and reducing troubleshooting and recovery times.
Hardware Standardization — We have standardized on hardware vendors with a track record of high security standards and quality support, including Cisco, Juniper, HP and Dell.
Our applications run on a wide variety of systems and server software across Linux, BSD, and Windows operating systems. We ensure security through:
Timely Application of Updates, Bug Fixes and Security Patches — All servers are registered for automatic updates to ensure the latest security patches are installed and vulnerabilities are rectified as soon as possible.
Periodic Security Scans — Frequent checks are run using enterprise-grade security software against the most comprehensive and up-to-date vulnerability databases, allowing us to proactively protect our servers before an attack occurs.
Pre-Upgrade Testing Processes — Our system administration team documents the impact analysis of software upgrades, and any perceived high-risk upgrades are first beta-tested in our labs before live deployment.
All application software used in our platform is built by us — we do not outsource development. Any third-party products go through comprehensive training and testing procedures. Each application is broken down into components such as User Interface, Core API, and Backend Database, each with its own security checks, and all sensitive data is stored in an encrypted format.
The weakest link in any security chain is always the people you trust. Information is divulged only on a "need-to-know" basis, and authorization expires upon expiry of the requirement. Every employee with administrator privileges to any of our servers goes through a comprehensive background check.
In a vast deployment of globally distributed servers, audit processes are required to ensure process replication and discipline — verifying that servers are patched regularly, backup scripts are running, offsite backups are rotated, personnel checks are performed, and security equipment sends timely alerts. Our audit mechanisms alert us to any kink in our security processes before it is discovered by external users.
