Snapshot 224147
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip navigation Search Support Admin Login Our mission is to protect your mission. At Duo, we take security very seriously, and protecting our customers is always first priority. Leave security to the experts and put the focus back on growing your business. PEOPLE Mission control Your professional security experts Duo’s full-time security team is experienced in running large-scale systems security. We employ the top mobile, app and network security experts. Our researchers and engineers have worked at Fortune 500 companies, government agencies and financial firms. Duo is founded by CEO Dug Song and CTO Jon Oberheide, two respected pioneers in the security community with a commitment to driving innovation and growth. Learn more about our team. Ongoing security innovation Duo is committed to investigating new security concerns. To encourage engagement in the security community, please contact security@duosecurity.com or visit Security Response for any security issues. PROCESS Built-in security Automatic updates Duo follows an agile development cycle, releasing updates in hours and days compared to several months and quarters, typical of other two-factor vendors. There’s no overhead required to keep our application up to date - we send automatic updates to your users’ devices to ensure they have the latest security patches and features. Consider it the end of maintenance windows for your in-house IT support. Standardized security processes Duo builds security into each step of our operations, including customer data handling, code release, upgrades, patch management, security policies and more. We endeavor to meet compliance standards like PCI DSS, ISO 27001, NIST 800 and more. A team of independent third-party auditors regularly audit and review our infrastructure and operations to ensure we’re secure enough to support our customers. TECHNOLOGY Security by design Secure authentication Some two-factor solutions rely on shared secrets to generate token numbers, which, if attackers steal, they can use the information to compromise an organization. Duo’s two-factor solution is designed with security in mind. We use asymmetric cryptography, keeping only the public key on our servers and storing private keys on your users’ devices in a tamper-proof secure element. Duo never stores your passwords - meaning your logins stay safe. Designed for people We know the most effective security solution is one your users actually use. Our solution only requires your users to carry one device - their smartphone, with the Duo Mobile app installed on it. Logging in via push notification is fast and easy. We strongly recommend using Duo Push as your second factor, a more secure method than SMS passcodes that can protect against man-in-the-middle (MITM) attacks. High-availability architecture Duo has maintained uptime of greater than 99.99% for more than four years, with a hard service level guarantee backed by SLA. Duo’s servers are hosted across independent PCI DSS, ISO 27001-certified, and SSAE 16-audited service providers with strong physical security. We provide a high-availability service split across multiple geographic regions, providers and power grids for seamless failover, and our multiple offsite backups of customer data are encrypted. Compliance Duo stays at the leading edge of international and industry standards for compliance so you can skip right to the work that matters to you. Learn more about how we help you comply. Explore compliance Data centers and hosting Duo is headquartered in the United States and operates internationally. Our data centers are located in 9 countries: the United States, Canada, Ireland, the UK, Australia, Germany, India, Singapore and Japan. Technical specifications Duo’s data centers are ISO27001 and SOC2 compliant and maintain 99.999% target service availability goal. All functionality from Duo’s zero trust platform—including multi-factor authentication (MFA), single sign-on (SSO), VPN-less remote access, device trust and adaptive risk-based policies—are available through these data centers. Why local data centers matter Compliance and confidence Keeping data local helps you align with national data compliance regulations, while giving users confidence that their data is in good hands. Reliability and uptime Proximity to your data center increases connection stability, making it easier to optimize your security infrastructure and your application environments. Cost savings Duo’s data center manager is responsible for maintaining high availability while reducing power cost, resulting in lower total cost of ownership for our customers. Where is my data center? Customer location Americas Europe, Middle East, Africa Asia Pacific Data center location United States, Canada, Ireland Ireland, Germany, the UK Australia, Japan, Singapore, Ireland, the UK, India Ready to secure your organization? Experience for yourself why Duo is one of the most trusted access management tools. Try it for free, explore editions, and connect with security experts. Start your free trial See why Duo is the leader in identity security. Compare editions Find out which edition is right for your organization. Contact sales Connect with our sales team and learn more.