Encryption model & independent audits — found from sitemap — Securden Password Vault for Enterprises

Cited by

Facts read from this source

• Encryption algorithm Report an error

  “Securden uses the AES-256 algorithm to do the encryption.”

• Encryption key separation Report an error

  “The encryption key cannot be held together with the encrypted data.”

• Installation unique key Report an error

  “Every installation is secured with an automatically generated, unique random key.”

• Fips mode Report an error

  “Securden Password Vault for Enterprises can be configured to operate in FIPS-compliant mode, ensuring that all encryption processes are performed using FIPS-certified systems and libraries.”

• Securosys hsm Report an error

  “Securden Password Vault for Enterprises additionally offers support for Securosys HSM, allowing users to store and manage the master encryption key in Securosys.”

• Multi tenant msp edition Report an error

  “Securden Password Vault for Enterprises also provides an MSP edition designed to facilitate multi-tenancy and secure data segregation among different client organizations.”

• Database connection security Report an error

  “The database accepts only secure connections. Clients can connect only from the same localhost.”

• Authentication methods Report an error

  “The vault can communicate with LDAP-compliant directory servers (Active Directory/Entra ID (Azure AD)) for user onboarding, management, and authentication. It also communicates with SAML-based Single Sign On solutions for authentication. Securden also leverages RADIUS authentication and Smartcard authentication too as the primary authentication mechanism.”

• Native password hashing Report an error

  “Securden uses the bcrypt hash function, which is considered an advanced algorithm that could withstand brute force attacks, to create one way hash of the Securden user password. The hash is then encrypted using the AES-256 algorithm.”

• MFA enforcement Report an error

  “As an additional layer of security, Securden helps enforce a second authentication factor to grant access to the vault. It integrates with a variety of MFA solutions to achieve this.”

• MFA integrations Report an error

  “Any TOTP authentication Any RADIUS-based authentication Duo Security Yubikey Email to SMS gateway OTP through email”

• API token auth Report an error

  “The vault can be programmatically accessed using APIs and Securden follows a token-based authentication. Authorised users need a URL and an Auth Token to access the permitted data.”

• Transmission encryption Report an error

  “The communication between the Securden web-interface and the server is encrypted and happens through HTTPS. Data transmission between the Securden server and database happens through SSL.”

• Ssl certificate requirement Report an error

  “Securden enforces deploying a third-party signed or a wildcard SSL certificate.”

• No offline caching Report an error

  “There is no offline caching in extensions and mobile apps. They always connect to the Securden server to fetch data.”

• Access control roles Report an error

  “users get access only to the passwords that are allocated to them after successful authentication. They won’t get to know about the accounts that are not related to their job profile.”

• Account ownership Report an error

  “By default, the person who adds an account is designated as the owner of the account. This way, all accounts have well-defined ownership. No account is allowed to be left an orphan.”

• Folders micro vaults Report an error

  “Accounts can be grouped as folders, which are like ‘micro vaults’. Each such micro vault can be granularly shared with the members of a group.”

• Just in time access Report an error

  “Users will have to raise a request, which is approved by administrators for time-limited access. At the end of the access period, the password can be automatically randomised.”

• Secure remote access Report an error

  “By default, all remote connections and operations happen through the Securden server. This approach ensures that there is no direct connectivity between the end users and the target devices.”

• Password not revealed remote access Report an error

  “The remote access architecture enables granting access to target devices and applications without revealing the underlying passwords or keys.”

• Audit trails Report an error

  “Securden captures all activities in the form of audit trails. You can view and search the trails to find ‘who’ did ‘what’ and ‘when’.”

• Siem support Report an error

  “Securden allows for the periodic sharing of privileged access data logs with SIEM solutions.”

• High availability Report an error

  “As the configuration involves running the Securden server and the database on different servers, the database has been configured to accept connections only from specific IP addresses”

• Encrypted backups Report an error

  “the backup copy remains fully encrypted. The encryption key is separated from the backup copy.”

• Input validation Report an error

  “Securden validates all inputs in the web-interface, and the application is guarded against attacks like SQL injections, cross-site scripting, buffer overflow, and other attacks.”

• Browser extension csp Report an error

  “Content Security Policy (CSP) is enforced. Inline JavaScript execution and AJAX requests to other sites are prohibited.”

• Server hardening Report an error

  “Except for the web-server port, no other port needs to be opened on the firewall.”

• Tamper proof logs Report an error

  “The securely stored audit logs contain detailed information, including user actions, timestamps, and originating locations, ensuring their integrity against tampering. Any attempts to manipulate these logs will promptly trigger alerts.”

• On premises Report an error

  “PASSWORD VAULT ON-PREM”

• Entity address Report an error

  “Securden, Inc. 140 E. Ridgewood Avenue, Suite 415, Paramus, New Jersey 07652 2810 N Church St, PMB 75693, Wilmington, Delaware 19802-4447”

Scores citing this record

• The CISO Encryption model & independent audits
• The CISO Sharing, roles & recovery
• The CISO SSO, directory sync & provisioning
• The CISO Audit logs, policies & reporting
• The CISO Hosting choice, offline access & export
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor SSO, directory sync & provisioning
• The Compliance Auditor Audit logs, policies & reporting
• The Compliance Auditor Hosting choice, offline access & export
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Sharing, roles & recovery
• The DevOps Engineer SSO, directory sync & provisioning
• The DevOps Engineer Audit logs, policies & reporting
• The DevOps Engineer Hosting choice, offline access & export
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer SSO, directory sync & provisioning
• The Identity Engineer Audit logs, policies & reporting
• The Identity Engineer Hosting choice, offline access & export
• The Skeptic Encryption model & independent audits
• The Skeptic Sharing, roles & recovery
• The Skeptic SSO, directory sync & provisioning
• The Skeptic Audit logs, policies & reporting
• The Skeptic Hosting choice, offline access & export
• The SME Owner Encryption model & independent audits
• The SME Owner Sharing, roles & recovery
• The SME Owner SSO, directory sync & provisioning
• The SME Owner Audit logs, policies & reporting
• The SME Owner Hosting choice, offline access & export