How can I guarantee both mine and the customers security, what methods of security is being used?

1

@thahaseen could you answer this in detail?

2

TradlyPlatform is hosted on AWS and we follow the best practices:

  1. All our API endpoints are secured using secret API keys or JWT tokens which are expired periodically and need to be refreshed.
  2. All our servers are hosted in a private network, they are not accessible from the Internet, except for the load balancers and a bastion server for SSH (that does not have any credentials on it).
  3. All the incoming requests go through a set of WAF firewall rules before they are processed.
  4. HTTPS/SSL certificates for everything.

If you have any specific concerns, please Contact Us or reply here and we’ll be happy to help. :slight_smile: