Enterprise-Grade Security

Our platform implements robust SSL/TLS encryption across all services to protect data in transit. The gateway service is configured with SSL email backend support, ensuring even administrative communications are encrypted.

The system includes intelligent TLS handling across different deployment environments, with platform-specific optimizations while maintaining security standards.

Two-factor authentication with email codes, authenticator apps and backup codes.

Every player gets its own revocable credentials instead of one shared account key.

802.1X passwords are stored encrypted and masked everywhere.

Fine-Grained Permission Controls

Implement granular, object-level permissions with rules-based handling. Our system supports multiple authentication backends (OAuth2, Django model) to ensure flexibility while maintaining strict security, including public read and project-private settings.

Sub-Users in Bulk

Add sub-users in bulk from a CSV file.

Advanced Login Protection

Protect against brute-force attacks with failed attempt monitoring, configurable limits, and time-based lockout mechanisms (e.g., a 2-minute cooldown). Exclude specific API endpoints for secure service-to-service communication.

• Content changes with before and after.
• Device actions with the sub-user who clicked.
• Power and online history.
• Publishing history with one-click republish.
• A trash bin that restores content, playlists, schedules, devices and tags.

Our solution implements several layers of physical and remote tamper protection for your digital signage devices. From read-only filesystems to secure PIN authentication and Balena-based security architecture, your screens are safeguarded against unauthorized access and modification.

Learn more about Tamper Protection

Advanced Middleware Security Stack

Our security architecture implements multiple layers of protection through carefully configured middleware, including sophisticated CORS protection, CSRF middleware, and integrated one-time password validation.

OAuth2 & API Security

Our OAuth2 implementation features extended token lifecycles, automatic token rotation, custom client secret generation, and granular scope-based permissions (read/write access controls) for industry-standard authentication and authorization.

Infrastructure Monitoring & Data Protection

We ensure comprehensive data protection through encrypted data transmission (SSL/TLS), secure file storage on Google Cloud, and access-controlled API endpoints. Our infrastructure monitoring integrates with InfluxDB and Grafana, featuring custom logging with security filtering and performance monitoring across all services.