|
Security
Now more than ever, there is an added emphasis on security.
At MostlyWeb, we have always taken security seriously, thanks
in part to our experience with very large Web sites (more
than 2 million pages). With large sites, you are exposed
to that many more people who may be motivated to hack into
your site or try and create errors on the server. By creating
a sound system architecture and implementing safe coding
practices, we have managed to maintain the integrity of
the site and ward off hack attacks.
One of our other clients is in the business of providing
it's users with a way to automatically log into password
protected sites. So you log into their site once and from
there you can then automatically log into all your
protected sites such as your online banking account, stock
trading, frequent flier, and so on. You can imaging that
there is a tremendous emphasis on security as this site
stores people's log-on credentials to their personal accounts.
The insurance company for this client performed frequent
security audits trying to hack into the site or otherwise
gain access to sensitive data. MostlyWeb has successfully
fended off all of their attempts to hack into the system.
We did so by doing the obvious like keeping up with security
patches, using a firewall, and so on but we had to do more
than that. We also created a network within the network
for the database and application servers, encrypt all the
data in the database (to make sure a hacker can't read the
data even if he/she managed to get to the database), use secure
Web connections, and so on. Several years of maintaining
this sensitive site as well as continually working on very
large sites means that MostlyWeb has become an expert in
the security arena.
While security is critical for some of our clients, others
have less stringent requirements. It all depends on what
it is you are trying to do and how sensitive the data is
you are storing. But whatever your requirements may be,
rest assured that we will never do anything that would enable
even a competent hacker to easily gain access to your information.
|