Update netdata-security.md (#15067)
Chris Akritidis committed
May 17, 2023 at 07:32 UTC
90552f5a1648a410ecb7fba81e48a16a9a5da0a9
1 file changed
+12
-12
docs/netdata-security.md
+12
-12
@@ -213,29 +213,29 @@ By collecting this data, Netdata is able to continuously improve their service a
213
214
Internal Security Measures at Netdata are designed with an emphasis on data privacy and protection. The measures include:
215
216
-1. **Infrastructure as Code (IaC)** \
216
+1. **Infrastructure as Code (IaC)** :
217
Netdata Cloud follows the IaC model, which means it is a microservices environment that is completely isolated. All changes are managed through Terraform, an open-source IaC software tool that provides a consistent CLI workflow for managing cloud services.
218
-2. **TLS Termination and IAM Service** \
218
+2. **TLS Termination and IAM Service** :
219
At the edge of Netdata Cloud, there is a TLS termination, which provides the decryption point for incoming TLS connections. Additionally, an Identity Access Management (IAM) service validates JWT tokens included in request cookies or denies access to them.
220
-3. **Session Identification** \
220
+3. **Session Identification** :
221
Once inside the microservices environment, all requests are associated with session IDs that identify the user making the request. This approach provides additional layers of security and traceability.
222
-4. **Data Storage** \
222
+4. **Data Storage** :
223
Data is stored in various NoSQL and SQL databases and message brokers. The entire environment is fully isolated, providing a secure space for data management.
224
-5. **Authentication** \
224
+5. **Authentication** :
225
Netdata Cloud does not store credentials. It offers three types of authentication: GitHub Single Sign-On (SSO), Google SSO, and email validation.
226
-6. **DDoS Protection** \
226
+6. **DDoS Protection** :
227
Netdata Cloud has multiple protection mechanisms against Distributed Denial of Service (DDoS) attacks, including rate-limiting and automated blacklisting.
228
-7. **Security-Focused Development Process** \
228
+7. **Security-Focused Development Process** :
229
To ensure a secure environment, Netdata employs a security-focused development process. This includes the use of static code analysers to identify potential security vulnerabilities in the codebase.
230
-8. **High Security Standards** \
230
+8. **High Security Standards** :
231
Netdata Cloud maintains high security standards and can provide additional customization on a per contract basis.
232
-9. **Employee Security Practices** \
232
+9. **Employee Security Practices** :
233
Netdata ensures its employees follow security best practices, including role-based access, periodic access review, and multi-factor authentication. This helps to minimize the risk of unauthorized access to sensitive data.
234
-10. **Experienced Developers** \
234
+10. **Experienced Developers** :
235
Netdata hires senior developers with vast experience in security-related matters. It enforces two code reviews for every Pull Request (PR), ensuring that any potential issues are identified and addressed promptly.
236
-11. **DevOps Methodologies** \
236
+11. **DevOps Methodologies** :
237
Netdata's DevOps methodologies use the highest standards in access control in all places, utilizing the best practices available.
238
-12. **Risk-Based Security Program** \
238
+12. **Risk-Based Security Program** :
239
Netdata has a risk-based security program that continually assesses and mitigates risks associated with data security. This program helps maintain a secure environment for user data.
240
241
These security measures ensure that Netdata Cloud is a secure environment for users to monitor and troubleshoot their systems. The company remains committed to continuously improving its security practices to safeguard user data effectively.