Asset Bank Security

Application Security

At Asset Bank it is a priority to ensure your data is secure. Application security features include:

  • Independent penetration tests that are run quarterly against the application and hosting infrastructure
  • User passwords are securely hashed before they are stored in the database
  • Support of various Single Sign-on and Federated Identity implementations
  • Configuration options for password strength, maximum login attempts, password change frequency and security questions
  • Built-in audit logging that enables you to track who has logged in and when and all actions users perform against assets (views, downloads, uploads, modifications, etc.)

In addition, we have a security vulnerability management and disclosure policy, details of which can be seen further down this page.

Hosting Security

If hosting with us, then additional security features related to our hosting environment can be seen here:

Shared Hosting Service Description

Security Vulnerability Management and Disclosure Policy for Asset Bank

Asset Bank is committed to fixing serious security vulnerabilities promptly and carefully.

In order to protect our customers we ask that vulnerabilities be disclosed responsibly and reported to us in confidence so that we have the opportunity to investigate them and if necessary release a fix before the vulnerability is disclosed publicly.

How to Report a Security Issue

Please email security@bright-interactive.com.

Please provide enough detail to allow us to reproduce and investigate the issue quickly, including:

  • Step by step instructions to reproduce the issue
  • Affected version
  • Affected configuration (e.g. operating system, browser, other software involved, settings)

Our response

When we receive a vulnerability report we will:

  • Acknowledge receipt of the vulnerability report.
  • Investigate the report.
  • If necessary, develop a fix for the vulnerability.
  • When security fixes are released, notify subscribers to our security mailing list.

Get Regular Security Announcements

Sign-up here to receive security related announcements from the Asset Bank team.