Skip to main content

🔒 Security Infrastructure Complete

· One min read
Security Team
Security Team
Cert-IX Security Engineering

The core security infrastructure for Cert-IX is now fully operational with enterprise-grade security measures.

SSL/TLS Configuration​

All Cert-IX services are now secured with:

  • TLS 1.2/1.3 with strong cipher suites
  • Wildcard SSL certificates for *.cert-ix.com
  • HSTS with 2-year max-age and preload
  • Certificate transparency logging

Authentication System​

Multi-Factor Authentication​

  • TOTP (Time-based One-Time Password)
  • Push notifications for mobile devices
  • Hardware security keys (FIDO2/WebAuthn)

Session Security​

  • JWT tokens with 15-minute expiration
  • Refresh tokens with 7-day expiration
  • Device fingerprinting for session binding
  • IP binding for anomaly detection

Database Security​

PostgreSQL Cluster​

  • Primary + 3 Read Replicas with SSL required
  • pgBouncer connection pooling with SSL
  • Encrypted connections using TLS 1.3

MongoDB Security​

  • Replica set with authentication
  • Encrypted at rest using AES-256
  • Network isolation with proper firewall rules

Rate Limiting​

All API endpoints are protected with rate limiting:

Endpoint TypeLimit
Authentication10/minute
Standard API60/minute
Bulk Operations10/minute

Security is our top priority. All systems are continuously monitored and updated.