FAQs

The problem with security is that every new application; …is built by a new team, …using different tools and methods, …to build different code, …that includes different security vulnerabilities, …and therefore needs its own security testing, …and ultimately needs its own remediation.

A Digital Assessment Survey showed on average; …1 vulnerability for every 8 lines of code, and 1 CRITICAL vulnerability for every 69 lines of code

Solution: Eliminate application security concerns at the platform level The WorkXpress architecture allows developers to build applications that pass application-level security tests…AUTOMATICALLY.

How? WorkXpress is a secure platform with a unique, proprietary architecture. Because of this, the applications built on top of WorkXpress do not need to be independently penetration tested - they are automatically secured according to level of security applied to the platform itself.

In other words, one secure platform saves thousands of applications from having to be tested and secured individually, avoiding enormous expense of time, cost, training and remediation. Security features include;

• Encrypted URLs
• Hardened against XSS scripting
• No JS allowed
• Hardened against SQL injection
• Penetration tested
• Unified up‐to‐date package set
• Physical and network security are controllable
• No anonymous API or user access

Additionally, the WorkXpress platform provides critical Data-security tools

• Data encryption in transit
• Data encryption at rest as needed
• Data redaction of critical privacy information
• Supported infrastructure offers compliance including SAAS70, Federal, HIPAA, HITECH, PCI and more.

For one example of how a specific public cloud provider, Amazon Web Services, supports a range of compliances please see http://aws.amazon.com/security/