Encryption model & independent audits — found from sitemap — Psono

Cited by

Facts read from this source

• Crypto core Report an error

  “At Psono’s core, we use Curve25519 and Salsa20 in the form of NaCl (pronounced “salt”), the Networking and Cryptography Library.”

• Browser encryption Report an error

  “Psono encrypts vault data, such as passwords and notes, in your browser using NaCl authenticated encryption before storing it on the server in a “secret object.””

• Password derivation Report an error

  “The browser application encrypts the datastore with a key derived from your password. We use scrypt as the password-derivation algorithm.”

• Transport layers Report an error

  “Three encryption layers protect your data as it travels from your browser to our application server. The base layer is client-side encryption of the data itself.”

• Transport encryption layer Report an error

  “Psono implements an intermediate layer that we refer to as Psono’s transport encryption layer. This layer acts as a tunnel, similar to a VPN tunnel, between the website or extension running in your browser and our application server.”

• Tls pfs Report an error

  “As the outer layer, we use HTTPS (TLS 1.2). Both the intermediate and outer layers are built and configured to support perfect forward secrecy (PFS).”

• Encryption at rest Report an error

  “The application server encrypts all private data, such as your email address, before storing it in the database. We use the Salsa20 stream cipher with a Poly1305”

• Regular updates Report an error

  “Psono recognizes this and releases regular updates with the latest security patches and features.”

• Open source Report an error

  “Psono’s core is open source and will remain open source.”

• Self host free Report an error

  “First, we provide our server and clients free of charge for on-premises hosting, with Docker making deployment as easy as possible.”

• Text file backup Report an error

  “Second, we provide a simple text-file backup function.”

• Cloud providers Report an error

  “Third, we run our cloud service on Amazon Web Services (AWS) and Google Cloud Platform (GCP), which minimizes the risks of data-center outages, data loss, and server problems.”

• Daily backups Report an error

  “We automatically back up all data from the Psono.pw service every night to provide the greatest possible protection against data loss. Access to these backups is restricted to a very limited number of people.”

• Code audits Report an error

  “We audit all new code. It requires manual approval before being put into production, and automated checks help ensure code quality.”

• Automated testing Report an error

  “We test all code automatically at multiple stages. It must pass several quality checks before it is considered ready to go live.”

• Vulnerability scans Report an error

  “Automated scans run nightly and trigger notifications as needed. These scans also run automatically in our build pipeline, blocking vulnerable releases. Additional checks from third parties, such as GitHub, issue alerts for every new CVE.”

• Multizone network Report an error

  “Our network follows best practices and makes full use of the security controls provided by our cloud providers. It is split into multiple layers, with firewalls between them, to restrict access and prevent or delay potential intrusions.”

• Ddos protection Report an error

  “Psono uses Cloudflare to mitigate the risk of outages caused by DDoS attacks.”

• Entity Report an error

  “esaqa GmbH Tiergartenstr. 13 91247 Vorra Germany”

Scores citing this record

• The CISO Encryption model & independent audits
• The CISO Hosting choice, offline access & export
• The CISO European sovereignty
• The CISO Encryption model & independent audits
• The CISO Hosting choice, offline access & export
• The CISO European sovereignty
• The CISO Pricing transparency
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor Hosting choice, offline access & export
• The Compliance Auditor European sovereignty
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor SSO, directory sync & provisioning
• The Compliance Auditor Hosting choice, offline access & export
• The Compliance Auditor European sovereignty
• The Compliance Auditor Pricing transparency
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Hosting choice, offline access & export
• The DevOps Engineer European sovereignty
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Hosting choice, offline access & export
• The DevOps Engineer European sovereignty
• The DevOps Engineer Pricing transparency
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer Hosting choice, offline access & export
• The Identity Engineer European sovereignty
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer SSO, directory sync & provisioning
• The Identity Engineer Hosting choice, offline access & export
• The Identity Engineer European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The SME Owner Encryption model & independent audits
• The SME Owner Hosting choice, offline access & export
• The SME Owner European sovereignty
• The SME Owner Encryption model & independent audits
• The SME Owner Hosting choice, offline access & export
• The SME Owner European sovereignty