Security FAQ

🔐 Is my data at Warpgate API secure?

We chose AWS as our cloud-hosting provider due to their dedication towards server security.

🔑 Is my customer data encrypted?

Yes. All customer data is encrypted at rest and in-transit.

• In transit, we use HTTPS to encrypt all traffic

• SSL certificates are provided by Amazon Web Services.

🔏 How do you store sensitive information like user passwords?

We never store plaintext passwords of users.

When you create a user via the API, we hash the password you pass using a Bcrypt password hashing function. We perform 12 rounds of hashing using our own Salt. This is why you may notice a slightly slower than usual API call when you create a user using the register() or signup() function.

🦹🏻‍♂️ How well is Warpgate protected against server vulnerabilities?

Amazon Web Services, where we host our applications, is built with a high-level of security which immediately grants our DNS and EC instances protection against DDoS attacks,

We prevent SSH access from the outside world and our core applications live behind a load balancer.

• Fault tolerance: our core API is built using Elixir which is then compiled to native Erlang upon deployment. Erlang is known for fault-tolerance and is known for being used in telecom, banking and messaging platforms.

• Rate limit: we implement per IP and per user rate limit that prevents users from spamming our GraphQL mutations and queries.