RegBear
Security built into every customer environment
Compliance data is sensitive. RegBear’s RegTech platform keeps each customer in its own isolated environment, with mandatory two-factor authentication and real-time monitoring.
Isolation
Complete isolation between customers
Every customer gets its own database and its own database user. Customer data is separated by design.
- A separate database for every customer
- A separate database user for every customer
- Database, user and credentials created automatically at setup, with no manual steps
Customer A
Customer B
Customer C
Access control
Every sign-in protected, key changes recorded
Mandatory two-factor authentication
Every user signs in with a second factor. It is required, not optional.
Hardened sessions
Sessions are hardened to reduce the risk of misuse: they end when a password changes or when an administrator signs a user out everywhere, a password change from a new location needs a fresh 2FA code, and repeated failed sign-ins trigger a lockout and a CAPTCHA.
Sign-in logs
Every sign-in is logged, so you can see who accessed the platform and when.
Change history
Changes to users, modules and settings are recorded in a change history.
Monitored around the clock
CPU, memory, disk and database activity are monitored in real time, 24/7, for the platform and for each customer environment.
Penetration testing
Security testing with guardrails
Built-in penetration testing helps identify issues while reducing risk to your systems.
Scope-gated
Tests run only against the targets you have put in scope.
SSRF-guarded
Protected against server-side request forgery to reduce the risk of tests reaching internal systems.
Have a security question?
Send us your questions and we usually reply within one business day.