Secure Knowledge Base

Security of data is one among the highest concerns for businesses, and every business wants that their data is in safe hands. PHPKB takes this responsibility seriously and makes sure that your business data remains protected. We apply noninterference concepts of multilevel security to the model, to achieve a highly secure knowledge base system. Our customers can rely on us as their information is secure, and their businesses are protected.

Knowledge base applications are #1 attack vector for data breaches, making protection a critical priority for enterprises around the world. Superior protection requires testing throughout the software development life cycle (SDLC) i.e. to work on security from inception through production. PHPKB lay emphasis on Dynamic Application Security Testing (DAST) solution to find, secure, and monitor entire portfolio of knowledge base system.

Web Application Firewall

WAF at PHPKB determines the rules how visitors may interact with your knowledge base. It is a countermeasure because it identifies threats against Open Web Application Security Project (OWASP) threats. These includes cross-site scripting, the injection of malicious scripts into a knowledge base, and the SQL injection. In this process, attackers inject an SQL query into your database to read/change sensitive data or execute administrative operations. PHPKB ensures the safety of software by performing actual attacks to detect security vulnerabilities in query strings, headers, fragments, verbs (GET/POST/PUT) and to find architectural weaknesses. PHPKB tests against OWASP ASVS checklists to harden its knowledge base application against hackers.

Application security

PHPKB takes steps to securely develop and test against security threats to ensure the safety of your data. We maintain a Secure Development Lifecycle, in which training our developers, and performing design and code reviews, takes a prime role. In addition, PHPKB employs third-party security experts to perform detailed penetration tests on different applications within our family of products.

Access Control

Access control protects both front-end and back-end data of your knowledge base. It control access to your knowledge base resources by implementing restrictions. The access control in PHPKB such as user levels, member groups or login attempts allows you to determine, what they can access or which type of functions they can perform.The access control component is capable to identify backdoor access points, and block access and render them useless, for example login attempt restriction. System will notify you of their existence and provide detailed reports of breaching tries.

Spam Protection

Spam protection is an essential component for your knowledge base. About 95 percent of all knowledge base attacks are usually infected by SPAM bots. Spam bots wreak all kinds of attack havoc, therefore PHPKB ensures to keep them off from your knowledge base through its strong Spam Protection policy.

Data security

PHPKB provides data security by following strong encryption standards in two ways:

Data-at-rest Encryption

PHPKB stores all of your crucial data in data stores in encrypted format.

Data-at-transit Encryption

Communications between customer and PHPKB servers are encrypted via industry best-practices HTTPS and Transport Layer Security (TLS) over public networks. TLS is also supported for encryption of emails.

Disaster Recovery

We ensure services remain available or are easily recoverable in the case of a disaster. This includes generating regular backups of your data and notification related to maintenance time for our hosted customers.

Business Continuity

PHPKB employees are trained to work remotely to ensure that PHPKB can provide services to its customers even at the time of disaster and crisis.

Product Security Features

Account administrators can manage access and sharing policies through PHPKB's Identity Access Management. In addition, PHPKB knowledge base provides IP Restrictions to enable administrators to determine who can access their service. All communications between hosted PHPKB knowledge base service and user interface or APIs are encrypted using HTTPS.

What security practices are followed by PHPKB?

Most of the knowledge base providers don't pay any heed on security issues. However, PHPKB follows best security practices for protecting your knowledge base data for data breaches.

• Clearly defined coding standards and quality controls.
• Creating policies based on both internal and external challenges.
• Focus on security rather than on program challenges.
• Using industry standards as a benchmark.
• Addressing vulnerabilities rather than flaws.
• Adopting a cross-functional approach to policy building.