At Katabat, data security isn't just a concern. It's our culture. We constantly exceed industry-standard requirements and closely track the threat environment. As a result, our platform delivers ironclad protection. In our 11 years, we've never suffered a breach or hack.
We deliver the Katabat platform using a SaaS model (Software as a Service). Our team doesn't just design and code-we also deploy. Katabat is here, every step of the way, to optimize the platform to your specific needs. We'll take charge of software, hardware, security, and delivery.
PCI Level 1 Service for Over 25M Accounts
We have been PCI DSS compliant for more than ten years. We undergo annual evaluations like PCI DSS pen tests and SOC 2 Type 2 audits, as well as monthly systems scans and quarterly vulnerability assessments. Moreover, we welcome scans and tests by our clients. Staff, auditors, and customers keep us compliant on a daily basis.
Encrypted by the Katabat Platform, Not the Database
We take full responsibility for your information. We are vigilant every step of the way, from eliminating policy violations throughout the SDLC to operating the most secure F5 application firewalls. We employ host-based techniques and IPS/IDS. Critical data are encrypted with a well-vetted, AES-256 algorithm on the Katabat platform-not even our engineers can read them.
Secure Connection via TLS, Whitelists, and Deep Packet Inspection
All our communication channels are encrypted with the latest industry-accepted Transport Layer Security protocols (TLS1.2, TLS1.1). We provide secure access over the Internet with whitelisting. We also support dedicated network connections and VPN. Your data will be protected from its origin as a PGP-encrypted data file through its travel via TLS v1.2 HTTPS channel.
Platform Privileges Defined by You
Any access to platform modules is role-based. Our platform includes a feature-rich User & Role Manager. You can create your own roles, or choose from dozens of predefined roles. We also provide a built-in password policy that you can customize.
Platform Privileges Defined by You
Any access to platform modules is role-based. Our platform includes a feature-rich User & Role Manager. You can create your own roles, or choose from dozens of predefined roles. We also provide a built-in password policy that you can customize.
A Team of Dedicated Experts
For Katabat's IT professionals, data security is a passion. Our staff bring a set of unique skills, but more importantly, they're in touch with the industry. We track best practices using niche news outlets, intelligence reports, vendor-supplied data, and professional memberships. To keep Katabat up-to-date with this information, we've placed a CISO on the executive team.
Global Data Centers with Secure, Locked Racks
Our systems and data are co-located in some of the world's finest data centers. Each location undergoes annual audits to ensure PCI DSS, SOC 2 security requirements are met. You will know precisely where your data are at all times, down to the servers and disks. Your information will always remain in its designated region.
Linux, Tomcat, Java, CISCO gear, and MySQL
No contractors. No outsourcing. Only full-time Katabat engineers can access our backend. We typically deliver with single tenancy, but if it makes sense for your business, we offer multitenancy too. We meet and exceed our contracted SLAs with redundant firewall clusters, replicated data, and redundant, load-balanced servers with dual power supplies.
Safely Handling Data, from Upload to Deletion
Our platform accepts data through manual agent input and automated data loading. It's also easy to transfer data. We can pull or push data files from FTP sites, or use API and web service calls. These methods are secure and malware-proof. Once uploaded, your data is only accessible by the people you choose. And when it is no longer in use, you can purge and delete. We will wipe and physically destroy the devices, providing you evidence of destruction.
Meets or Exceeds Industry Standard Requirements
In addition to our PCI status, our Business Continuity Program (BCP) conforms to ISO 22301:2012 - Societal security - Business continuity management system. We've also updated to adhere to GD
Always Prepared with a Plan
We have an incident response plan that is tested annually, which includes a DoS scenario. In the event of a glitch, we focus on availability and redundancy, not backup restoration. However, these situations are rare-we are known for maximum uptime and fast recovery.
Qualified, Highly Competent Staff Members
We take strong preventative measures against data theft: role-based access,separation of duties, access and egress monitoring, and data loss controls. Additionally, each Katabat new hire undergoes background checks and drug screenings. Training includes intense information security and privacy,as well as comprehensive product education.