Security

Kuroco is designed by Cloud-native and high security architecture.

API

  • completely encrypted HTTPS communication
  • Web Application Firewall(WAF)
  • CDN
  • DDoS Protection
  • access control through a fixed token, dynamic token, and Cookies
  • strict permissions control by configuring users groups
  • IP address access control
  • Access logs(Audit logs)
  • Application logs

Management screen

  • completely encrypted HTTPS communication
  • Web Application Firewall(WAF)
  • DDoS Protection
  • access limitation by ID & PWD
  • strict permissions control by configuring users groups
  • IP address access control
  • storage function of encrypted token
  • Access logs(Audit logs)
  • Application logs

KurocoFront

  • completely encrypted HTTPS communication
  • CDN
  • DDoS Protection
  • Static website hosting
  • BASIC authorization
  • IP address access control
  • Access logs

KurocoFiles

  • completely encrypted HTTPS communication
  • CDN
  • DDoS Protection
  • Static website hosting
  • IP address access control
  • Access logs

Vulnerability assessment

  • implementation of vulnerability assessment using VADDY (for the standard API in the main website only)
  • vulnerability assessment of API customized by users using VADDY (in progress)
  • free support for points related to Kuroco in individual vulnerability assessment

If you have any other questions, please contact us or check out Our Slack Community.