Snapshot 10864
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Trust built in. Security that scales Xperience by Kentico is secure by design with built-in safeguards, modern architecture, and global certifications. Launch and scale with confidence, backed by enterprise-grade protection without the complexity. Privacy-first platform with global compliance. enhanced security Confidence for your peace of mind. Secure API framework. Built on modern .NET and React, with zero reliance on third-party plugins or vulnerable open-source extensions. Enterprise authentication, out of the box with full support for SSO, 2FA, and configurable password policies. Access control across teams, brands and channels to content, publishing, customer data, and application settings. compliant Certifications and standards you can rely on. ISO 27001 certified: Rigorous security controls with a commitment to continuous improvement. SOC 2 Type II audited: Demonstrated operational excellence and long-term reliability. DORA-aligned: Built to support resilience and security in financial and digital services. Digital Services Act-ready: Aligned with evolving EU standards for transparency, user protection, and content governance. global trust Privacy built-in. Trust earned globally. GDPR-ready: Native tools for consent management, data access, reporting, and deletion requests. CCPA compliant: Supports opt-outs and data rights requests with streamlined workflows. Australia Privacy Act: Controls for enforcing data minimization and secure access policies. Global Trust: A privacy-first platform aligned with evolving international standards. Built-in authentication. Support for two-factor authentication (2FA). Enforceable password complexity rules and forbidden password lists. Account lockout controls to mitigate brute-force attacks. Fully configurable authentication settings to match your security policies. Seamless SSO integration. Centralizes identity management and simplifies access. Reduces admin overhead while improving security posture. Supports SSO for both authentication and role/permission mapping via claims. Synchronizes centrally managed roles from your identity provider to Kentico. Integrates with Microsoft Entra ID, Okta, Auth0, and more fully extensible for custom IdPs. Precision access. No compromise. A flexible permissions model that scales from simple to complex environments. Fine-grained control over who can view, edit, publish, or manage content. Define access by role, team, brand, channel, or even individual content sections. Build secure experiences from the ground up Our ebook Security-First Marketing shows how to embed protection into every layer of your digital stack with Xperience by Kentico. From secure APIs and enterprise-grade authentication to compliance with global privacy standards, learn how to deliver regulation-ready solutions with a platform architected for trust. Download the ebook Liam Goldfinch Principal Systems Developer IDHL “Kentico prioritises security. Few platforms offer a seven-day bug fixing policy, but Kentico does. When a bug is reported, it is promptly investigated, with a commitment to releasing a hotfix within seven business days providing peace of mind for everyone.” Discover what’s possible Learn more about security. Blog Mar 20, 2025 • 5 minute read Experts roundtable: How Kentico tackles rising CMS security threats Abigail Rice Blog Feb 6, 2025 • 8 minute read Building trust through compliance Abigail Rice Blog Mar 18, 2025 • 5 minute read How to prevent the devastating impact of a data breach with Kentico Juraj Komlosi Xperience by Kentico SaaS is independently audited and compliant with ISO 27001 and SOC 2 Type II. These cover security (and, for SOC 2, availability/confidentiality), with controls verified annually and supported by continuous monitoring, secure SDLC, and vendor-run vulnerability management. Security benefits include fewer third-party plugins (reduced supply-chain risk), a unified vendor-built architecture, a 7-day bug-fix policy, independent audits/certifications (ISO 27001, SOC 2), built-in WAF/DDoS and hardening in SaaS, and 24/7 vendor support with SLAs, versus community-maintained extensions and slower patch cycles. Each SaaS customer runs in an isolated tenant—separate application, database, and storage per project—reducing cross-tenant risk and improving blast-radius control. Isolation is paired with platform protections (e.g., WAF/DDoS), encryption, and role-based access to keep environments segmented and governed. Security bugs are addressed within seven business days, shipped as weekly hotfixes and, if needed, included in monthly refreshes. This short SLA minimizes exposure windows without waiting for major version upgrades. Yes. Xperience by Kentico undergoes regular independent audits (ISO 27001, SOC 2 Type II) and performs recurring security assessments and penetration testing. Evidence and policies are made available via the Trust Center, alongside vulnerability management and secure development practices. Production databases and media are backed up daily with weekly retention and geo-redundancy. SaaS targets RTO ≈ 1 hour and RPO 1–24 hours, includes annual DR testing, and offers self-service backups/restores via the Xperience Portal to speed recovery and rollback. Customers can also extend built-in uptime monitoring to their own website URLs directly from the Xperience Portal. Say goodbye to security risks Build a secure website ready for the future. DISCOVER HOW