How does COMPackage protect my data?
COMPackage employs industry best practices to maintain the security of the platform and all
data.
The security of your data is very important to us. Of course, no method of transmission over
the Internet, or method of electronic storage is 100% secure. While we strive to use
commercially acceptable means to protect your personal data, we cannot guarantee its
absolute security.
Here are the steps we take to protect your data.
Sensitive data, including credit card information and passwords, are encrypted. Credit card
data is encrypted and securely held by Stripe. Stripe is
the second largest online payment
processing tool for internet businesses. COMPackage does not store credit card data.
All data is behind a firewall.
The software used to build COMPackage (Laravel), has many
security features built into it
which we employ.
- CSRF Protection: Laravel provides built-in Cross-Site Request Forgery (CSRF) protection
through tokens. This helps prevent malicious actions from being executed.
- Input Validation: Laravel offers various methods for validating user input, making it
easier to prevent common vulnerabilities like SQL injection and cross-site scripting
(XSS) attacks.
- Authentication and Authorization: Laravel's authentication and authorization mechanisms
are robust and easy to implement. We use features like secure password hashing, user
roles, and policies for controlling access to resources.
- Secure Sessions: Laravel ensures secure session handling and management, using
industry-standard best practices to prevent session-related vulnerabilities.
- Guarding Against Mass Assignment: Laravel's Eloquent ORM includes built-in mechanisms to
prevent mass assignment vulnerabilities by allowing you to specify which attributes can
be mass assigned and which cannot.
- Password Hashing: Laravel uses the bcrypt hashing algorithm to securely hash passwords.
It also provides a simple and consistent way to manage password hashing and
verification.
- Encryption: Laravel offers straightforward encryption and decryption methods, helping
developers secure sensitive data in transit or at rest.
Our hosting company is Cloudways,
which uses
state-of-the-art security features including
enterprise-grade mitigation of DDoS attacks, secure Web Application Firewall (WAF) analyzes
millions of sites and 32 million requests per second to intelligently identify block
attackers and emerging threats. Cloudways security measures include: Firewalls, Login
Security, Bot Protection, Database Security, Application Isolation, SSL Certificates, User
Role Management, Operating System’s Security, Two-Factor Authentication, End-to-End
Encryption, and Suspicious Device Login Control. For more information,
visit https://www.cloudways.com/en/managed-security.php.