Hosting and maintenance / cyber security website
Cybersecurity
An additional level of protection for projects administered at SIDECUBE, with options such as dedicated VPN, MFA and access control.
Protected access for administration and restricted areas
For projects administered at SIDECUBE, we choose platform, user and data protection. The additional measures shall be set up and checked per project with the costs and responsibilities set out before.
- Dedicated VPN on requestSelected areas may be accessible only through authorised VPN with individual retractable access. The public website remains available and authentication in the application is still required.
- MFA and robot protectionWe can add multifactor authentication, CAPTCHA and limitation of connection tests, according to compatibility. CAPTCHA complements the other measures.
- Rolls, networks and sessionsWe establish individual accounts, minimum permissions, temporary access or after approved networks and expiry of sessions. Centralised authentication can be assessed where an identity system exists.
- Diaries and recovery of accessWe choose the events pursued, the alerts and the retention period. We define the recovery of access to the loss of the authentication device or factor.
What the service can include
VPN, MFA and other options are not automatically included or active on all projects. The risk reduction does not amount to a guarantee that an attack or incident cannot take place.
01Assessment of access
02VPN and MFA options
03Protection against automatic testing
04Rolls and Sessions
05Diaries and alerts
06Procedure for recovery of access
Protections must retain legitimate functions
- We are checking the access allowed and the rejection of unauthorised access in the agreed scenarios.
- We test integration, API and public functions affected by restrictions.
- We confirm the withdrawal of access and the recovery procedure.
- We document options enabled, limits and responsibilities.
Recommended pages
Pages related to this type of service: technologies, fields of activity, guides and complementary services.
Frequently Asked Questions
Before we begin the project
Choice, stages and support for cyber security.
01 / Service
Purpose and conditions
Does the VPN replace authentication in the application?
No. VPNs may allow access to the protected area, but the account and permissions in the application remain necessary. Individual access may be withdrawn separately.
VPN, CAPTCHA and MFA are implicitly active on all projects?
No. There are options chosen and verified according to the platform and users, with the costs and responsibilities clarified prior to the configuration.
02 / Preparation
take-over and access
How can an existing project be taken over?
We evaluate the platform, data and integration, then clarify compatibility, remedies and migration to SIDECUBE infrastructure. An initial audit can be delivered prior to the takeover decision; the full recurrent administration is done in our environment.
What information is needed for the estimation?
Platform and services used, data volume, important operations and known problems. We determine the works, access and responsibilities prior to intervention; passwords are not sent via public forms.
03 / Verification
Validation and limits
How do you check the result?
We are checking the access allowed and the rejection of unauthorised access in the agreed scenarios. We test integration, API and public functions affected by restrictions. We confirm the withdrawal of access and the recovery procedure. We document options enabled, limits and responsibilities.
What conditions and costs need to be clarified?
VPN, MFA and other options are not automatically included or active on all projects. The risk reduction does not amount to a guarantee that an attack or incident cannot take place.