WebCOBRA.com Encryption and Security
One of the most important questions you should ask yourself about any OnDemand web-service provider is "Is it Secure." You should even probably go a bit further and say, "How Secure is it?" Here are WebCOBRA.com's answers:
Is It Secure?
We believe WebCOBRA.com is the most secure Cobra Administration System yet designed.
OK, But How Secure Is It?
Very -- We use different methods of encryption depending on what we're trying to accomplish.
Overview: We use AES 128 bit encryption.
- User Passwords - These are one-way MD5 Encrypted. This means that no-one can ever get your password, not even us. If you lose your password, you can have it reset, but even if a hacker gets through our numerous levels of security, they could not get your password and login to the system. Without logging in, most data is useless.
- Sensitive Financial Data - Information such as bank account routing numbers and Credit Card numbers are stored using the absolute best AES 128 bit encryption.
- Access to Data - Every page is given a unique Identifier -- this looks in your browser window like "?cls.142/750/821/1". This ID is linked directly to your account, so if you tried to view a page that you don't have authorization to view, you'll throw a "Security Exception" and you won't be shown the data.
- Transmission of Data - All data is transferred over HTTPS using 128 SSL encryption. This is the same encryption banks and mortgage companies use and is the industry standard.
Who Can Login To My Data?
Only You! If you choose, you can grant (and more importantly deny) Travis Support reps the ability to view your data when diagnosing Support Cases. But if you don't want anyone else to see your data, Deny away!
How Can I Tell Who Has Accessed Sensitive Financial Data?
For electronic transactions, such as Credit Card Payments, WebCOBRA.com keep a detailed log of each user who views the transaction details. If you ever need to see who knew what, when, you'll be able to.
What About The Physical Security Of The Servers?
WebCOBRA.com is not hosted at Travis HQ -- the only people allowed into the highly secure datacenter are people with prior authorization. And that only gets you to the Floor where the datacenter is! Then, you'll need to pass the armed guard, the biometric handprint scanner, and then our locked Racks.