Protecting your data starts with a commitment to Best-In-Class security.

AT Alasco, we strive for a best-in-class security posture in order to keep your data safe. This means that we continuously invest in different domains to strengthen the security of our workplace, harden infrastructure & workloads, detect breaches and more.

Ensuring the Security of our Digital Workplace

As a technology company, we naturally care a lot about the security of our workplace. The way that colleagues in our company communicate, access applications and handle data plays a vital role in ensuring overall security. We work to create a secure environment by applying state-of-the-art concepts such as Zero-Trust and bringing in the right solutions to help with the job.

Zero Trust Architecture

Secure access management is a key cornerstone in any tech-enabled business. Using a SASE-architecture, we validate and authenticate at every key decision point in a context-based fashion (considering the user’s device, its state, location etc).

Awareness & Education

People can be the weakest link, but they can also turn into a strong point. This is how we look at it within Alasco. Our teams undergo a dedicated security onboarding, where we create awareness around key threat scenarios that are important for our company.

Secure Communication & Collaboration

To secure data during day to day work, we rely on a strong foundation. Alasco uses Google Workplace (Enterprise), end-to-end encrypted communication channels and more dedicated solutions, in order to ensure data is safe at any point in time.

Ensuring the Security of our Infrastructure & Applications

To build on a maximum strong foundation, Alasco heavily relies on EU-hosted AWS components to manage infrastructure, operations and service delivery.

Cloud Security Posture Management

In order to enhance the security posture of our AWS environment further, our teams have deployed dedicated security tooling that runs continuous security checks. Namely Cloud Security Posture Management (CSPM) and Cloud Infrastructure & Entitlement Management (CIEM) solutions.

System & Runtime Security

In addition to leveraging serverless concepts such as AWS Fargate as much as possible, we deploy safeguards in every runtime that we are managing. This includes Endpoint Detection & Response (EDR) and Vulnerability Management (VM) solutions to monitor for indicators of compromise in our environment.

Edge Security

Alasco’s infrastructure perimeter is protected through Cloudflare’s edge network and connected Web Application and API Protection (WAAP) capabilities. This added layer of security protects against 0day exploits, volumetric attacks and more.

Attack Surface Management

Taking the attackers viewpoint is an important (and high-leverage) strategic weapons against attacks. At Alasco, we aim to tightly control our external attack surface to minimize entry points that attackers can exploit.

Ensuring the Security of our Customer Data

We believe firmly that your data is our responsibility. You own it, not we. As such, we offer our customers a detailed Data Processing Agreement that describes our commitment to protecting any data that we collect and process to deliver our service.

Data Hosting in the European Union

Alasco’s EU-based data hosting is among the key infrastructure design decisions that was made early on. AWS is an explicit part of our security model, providing Alasco with state-of-the-art technology, safeguards and compliance to industry standards.

Customer Tenant Separation

Alasco leverages stringent data segregation principles. This means that our customer’s data is logically separated on the storage level with tight access control rules, such that access is only granted to authorized people even inside of Alasco. Our technology team is further working on a separation model based on data encryption.

Data Encryption

Encryption is an important piece of Alasco’s data security strategy. At any point when data is processed between our systems, we rely on Transport Layer Security (TLS) for transit encryption. This prevents eavesdropping. For data stored „at rest“, we leverage native AWS features to encrypt our data stores by default (S3, RDS, EBS).

Cross-Cutting Security Initiatives

Security at Alasco entails much more than what you see on this page. As our services are evolving, so is our threat landscape. Our Security Team runs quarterly OKR programs to improve the status quo even more. Here is a selection of other initiatives that are more cross-cutting in nature but could be valuable for you to understand.

Bug Bounty & Penetration Testing

Alasco is investing in a close relationship with the security research community, and we greatly value their help identifying vulnerabilities in our products. Our Vulnerability Reward Program was developed to honor all the external contributions that help us keep our services safe.

Incident & Breach Response

Incident response is a key aspect of Alasco’s overall security program. We have a diligently designed process for managing incidents. This process specifies actions, escalations, mitigation, resolution, and notification of any potential incidents impacting the security of our platform or data.

Continuous Threat Modeling

Security by Design mandates us to be as proactive as possible in understanding our own threat landscape. Our Security Team takes this risk-centric viewing angle by regularly conducting threat modeling workshops, to determine where we may have gaps or room for improvement.