In place today
- Hosted in India. Customer workloads and their data are hosted on Antarix Grid infrastructure in India.
- No direct exposure. Our servers do not accept direct connections from the internet; public traffic reaches them only through a protected gateway.
- Encrypted connections. Websites and the Antarix console are served over HTTPS.
- Access per environment. Console access is granted to each environment individually. Passwords are stored using strong, salted hashing, and sessions expire automatically after inactivity.
- Protected console. The console defends against cross-site requests and framing, and records access events.
- Careful changes. Platform changes are tested before rollout and can be rolled back.
On our roadmap
- Multi-factor authentication for the console.
- Stronger separation between customers on shared infrastructure, independently tested.
- An independent security assessment.
- A published incident-response and customer-notification process.
- Log retention aligned with CERT-In directions.
Reporting a vulnerability
If you believe you’ve found a security issue, please tell us through the contact form and start your message with “Security”. Please give us reasonable time to fix it before disclosing it publicly.
Need our security details for a review?
We share them with customers during onboarding. Contact us ↗