Security
What we do today to protect your data.
Your data stays separate
Each company has its own database schema, and every request is checked against the signed-in company.
Signing in
- Passwords are stored as salted hashes, never as text.
- Two-factor authentication works with authenticator apps and comes with single-use recovery codes.
- Single sign-on works with SAML 2.0 and OIDC.
- Viewer, maintainer, admin and super admin roles control who can do what.
In transit
Traffic uses HTTPS with HSTS, and agents connect outward over TLS when KLOUDSENTINEL_TLS is on.
Tokens
Tokens are stored as hashes. Browser and mobile tokens ship in public code, so they can only send data. They can't read it or act as an agent.
Activity log
Admins can see who changed what, with results and IP addresses.
Payments
Card details go directly to our payment provider, Razorpay. They never reach our servers.
Certifications
KloudSentinel does not hold SOC 2 or ISO 27001 certification today. The product's compliance reports help you assess your own systems against those frameworks.
Report a problem
Use Contact on the home page and mention security.