Security

Search…

Security

AWS Infrastructure
All our services are hosted on AWS infrastructure.
Isolated Services
All our instances have different credentials and Password logins are disabled. We create additional layer of isolation by running our services inside containers.
Virtual Private Cloud (VPC)
Our services running on private networks. They cannot be accessed from public internet.
Network
Communication over TLS and HTTPS 
Our public endpoints can be accessed only through a securely encrypted HTTPS. We support only modern ciphers and TLS v1.2 and above. Our services use a trusted Cerficate Authority and get TLS Certificate Rating A+ from Quallys SSL Labs
Firewalls
No part of our services are arbitarily exposed to internet
Encryption
Private Key Protection
Our private keys are protected by Hardware Security Modules (HSMs) with FIPS-140-2 security standards by NIST. They are never exposed, not even to our internal services.
Protected Passwords
Your password is never stored as a plaintext in our database. We use secure, modern hashing functions to hide your password. Even we don't have access to your password.
Encrypted Disks
The storage devices running our server instances are always encrypted by default
DevSecOps Principles
Security Analysis Tools
We utilize security analysis tools for code analysis and dependency vulnerabilities.
Service Health Monitoring
We use variety of tools for monitoring the health status of our services to make sure all our services up and running.
Automated Tests
We are constantly working on improving our services and building new feature. Rapid development comes with a risk of unintentionally breaking already working parts of the application. We prevent this by having a good test coverage in our development.
Automated & Multi-Step Deployments
We use automated CI/CD pipelines when releasing new updates on our services. Latest version reaches to users on our production servers, only after we make sure everything works as they should. Pipeline environments are Testing > Staging > Production.