1. Security Architecture Overview
Arisetek IT Solutions enforces a zero-trust, defense-in-depth security paradigm across all infrastructure layers. From client-side authentication to backend database storage, every request is authenticated, sanitized, and monitored.
2. Multi-Factor Authentication & Cryptography
• Administrative access requires Time-Based One-Time Password (TOTP) 2FA (RFC 6238 compliant).
• Passwords are encrypted using Bcrypt adaptive hashing (Work Factor 12).
• Stateless authentication tokens use HMAC-SHA256 JWT signatures with short expiration windows and automated revocation on credential update.
• Emergency single-use recovery codes are cryptographically hashed before storage.
3. Network & Transport Security
• All network traffic is strictly enforced over TLS 1.3 with HSTS (HTTP Strict Transport Security) headers.
• Edge firewalls and Cloudflare proxies filter DDoS attempts, SQL injections, and malicious bot traffic.
• Adaptive sliding-window rate limiters automatically throttle rapid authentication failures and abuse.
4. Database & Storage Protection
• MongoDB Atlas clusters are hosted in VPC-isolated networks with IP access whitelisting.
• Sensitive fields are encrypted at rest with AES-256.
• Automated point-in-time recovery and continuous encrypted snapshots ensure zero data loss.
5. Responsible Vulnerability Disclosure
If you discover a potential security vulnerability in our platform, please report it immediately to support@arisetek.in or admin@arisetek.in. We commit to acknowledging receipt within 24 hours, evaluating the issue promptly, and providing regular updates until resolution.