Snapshot 7684

Document
Security page
URL
https://wasabi.com/cloud-object-storage/security
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
323423 bytes
SHA-256 (raw)
bb8d14dc857d4b1358a9694850ed2ba4ae24cdeec5fd5b4fdfb8ecf9369a1562
SHA-256 (normalized text)
5be95fdf1b2d8fdbb17ea5d61bc01996a64c097d5a7728afe9082c0cb7a5af44

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip to content
Wasabi Security
Protect Your Most Critical Data Assets
Keep your data safe with enterprise-grade, defense-in-depth security from Wasabi.
Try Wasabi Free
Wasabi cloud storage security pillars
Our approach to security is deep and multi-faceted, designed to protect your data, your storage account, and your business.
Account security
Only your authorized users should have access to your Wasabi account. We enforce this policy with countermeasures that include MFA, Multi-User Authorization, IAM policies, and Enterprise level SSO options.
.
Data security
Our enhanced security posture includes server-side encryption (SSE-C), built-in immutability, and virtual air-gapping.
Physical security
Wasabi's products and physical data center locations are ISO 27001 compliant. Wasabi is deployed worldwide in top tier data centers that are SOC 2 compliant and certified for PCI-DSS.
.
Payment security
We keep your payment information safe in partnership with Stripe, our payment processor. All payments are PCI-DSS certified.
Security is obviously always on our mind. Data security is such a high-value need because schools are being targeted for things like ransomware now more than ever. It's not really ‘if’ an attack happens anymore, it's ‘when.’
– Kevin Warenda director of IT services, The Hotchkiss School
Prevent unauthorized bucket and account deletions
Our first-of-its-kind Multi-User Authorization feature requires that multiple root users sign off on bucket and account deletion requests—preventing malicious actors who have gained access to your credentials from deleting your data and storage account.
Learn More
Explore all the ways we keep your data safe
Wasabi offers a potent blend of security features that enable defense-in-depth for your cloud storage accounts.
Encryption
Your data is encrypted in transit and at rest on the Wasabi cloud storage platform. Wasabi supports the HTTPS protocol and server-side encryption with customer-provided encryption keys (SSE-C).
Learn more
MFA and SSO
Prevent account takeovers and data breaches, risks that arise with passwords that can be easily compromised. Wasabi leverages MFA and SSO to strengthen your control over account access.
Learn about MFA and SSO
Replication
Take advantage of intracontinental cloud replication and automatic failover—enabling business continuity by storing multiple copies of your files across different regions.
Explore replication
Immutability
Wasabi Object Lock maintains a write once, read many (WORM) archiving structure that prevents data from being edited or deleted due to ransomware, bad actors, accidental deletions, and other threats over a set period.
Explore Object Lock
Virtual air gapping
Wasabi’s Covert Copy™ technology lets you create a hidden copy of a storage bucket that is virtually invisible and inaccessible to anyone except the root user.
Explore Covert Copy
Vulnerability reporting
We maintain open channels of communication that enable you to report vulnerabilities and suspicious activities.
Reporting something
Wasabi Trust Center
Security and data protection you can trust
Explore the Wasabi Trust Center, a centralized hub for important legal, compliance, security and corporate responsibility info.
View the Trust Center
Related Resources
Tech BriefWasabis strong security systems and practices
One PagerWasabi multi-User authorization achieve account immutability for cyber resilient cloud storage
BlogWasabi's shared responsibility model
Protecting data in the cloud
BlogSecurity and compliance concerns for AI datasets
DOCUMENTATIONWhat third-party compliances does Wasabi hold?
LEgalWasabi data processing agreement
Frequently Asked Questions
Yes, data moving to and from Wasabi is secured using standard HTTPS protocols and all stored files are encrypted automatically using FIPS-197 certified AES-256 bit encryption. Customers can also supply their own encryption key during the API upload request. Wasabi uses it to write the data and then discards the key from memory. Wasabi also supports client-side encryption where the customer can also encrypt data locally before uploading it to a Wasabi bucket.
Yes, Wasabi supports multi-factor authentication. A Root account users can set up MFA and also set it up for sub-users and enforce compliance.
A Root user can add up to three security contacts who will be required to sign off on account activities that the root user specifies such as account deletion and bucket deletion. There is no limit to the number of activities that these contacts can oversee.
Get started
Wasabi is here to help you do the utmost to protect your data stored in the cloud. Talk to a cloud storage security expert today.
Contact Sales