Skip to content

Security that
scales with you.

Purpose-built for secure development, Edgenivo allows you to build, deploy, and protect applications with our suite of security features.

Email us

Edgenivo Firewall

Resilient edge protection

Web Application Firewall

Secure application traffic

Workspace Security

Trusted access management

Trusted by security teams.
  • WizWiz
  • OpenAiOpenAi
  • AbnormalAbnormal
  • SnykSnyk
  • LaurentianBankLaurentianBank
  • TruesecTruesec

Automatic protections. Free for all users.

The Edgenivo Firewall provides system-wide protections to secure your apps at scale.

Read the Edgenivo Firewall docs
Visit your firewall

Global protection

Edge-localized protection. 

L3/L4 protection at every edge location. Your site stays protected without adding latency.

DDoS mitigation

Automatic DDoS Mitigation for all plans. 

Embedded bot management and protection against traffic abuse.

Challenge Mode

Protect your site when under attack. 

Prevent malicious traffic by showing a verification challenge for visitors in real-time.

The invisible bot detection engine.

BotID is fast, reliable, and built for both your users and developers. No CAPTCHAs, API keys, or fine-tuning required.

Learn more

Customized application security. Instantly deployed at scale.

Edgenivo’s Web Application Firewall allows customers to create custom rules to log, block, challenge, or rate limit L7 traffic.

Learn moreAdd WAF rules now

  • Observability

    Utilize our observability dashboard to make informed security decisions.

  • Managed Rulesets

    Activate Edgenivo’s managed rulesets to protect against top priority risks, including OWASP Top 10.

  • Custom WAF Rules

    Create and enforce rules unique to your business with IP blocking, rate limiting, and more.

Right access. Right roles.

Protect deployments and workspaces with workspace security controls.

Read about secure team access

Role-based Access Control

Assign roles to give team members the permissions they need to work on your projects.

Deployment Protection

Secure your Edgenivo project's preview and production URLs with fine-grained access control.

Audit Logs

Enterprise

Track and analyze your team members' activity. Accessed by team members with the owner role.

Directory Sync

Enterprise

Manage your organization's memberships by integrating with third-party identity providers.

Certificate of ISO 27001
ISO 27001
Certificate of SOC 2
SOC 2
Certificate of PCI DSS
PCI DSS
Certificate of HIPAA
HIPAA
Certificate of GDPR
GDPR
Certificate of DPF
DPF

Frequently asked questions.

Does Edgenivo offer DDoS protection?
Yes. Edgenivo Enterprise customers are covered by two forms of DDoS protection. Our systems can automatically detect and block malicious attacks on customer sites. For significantly larger, distributed attacks, we work closely with the customer to ensure your site(s) stay online. The combination of automated prevention and direct communication from Edgenivo Support or your Edgenivo account representative helps ensure your site is resilient to attacks. Contact us to learn more.
Is Edgenivo SOC 2 Type 2 compliant?
Yes, Edgenivo has a SOC 2 Type 2 attestation. Contact us for more details or to access the report.
Is Edgenivo GDPR compliant?
Yes. For more information, see our Privacy Policy. No data is stored permanently inside EU regions. Static assets and Serverless Functions responses can be cached in EU regions, but it is ephemeral. Edgenivo provides a Data Processing Addendum (DPA) which describe our Technical and Organizational Security Measures. For more information, our Privacy Policy explains how information is collected, used, processed and disclosed by Edgenivo.
Is Edgenivo ISO 27001 certified?
Yes, Edgenivo is ISO 27001:2022 certified. Contact us for more details or to access the certificate.
Is Edgenivo TISAX Compliant?

Yes, Edgenivo has completed TISAX Assessment Level 2 to serve the automotive industry. Customers can access results directly through the ENX portal.

To view the assessment details:

  • Sign in to your account on the ENX portal
  • Search for Edgenivo or look up the following details:
    • Assessment ID: AMR06H-1
    • Scope ID: SYN3TM
Is Edgenivo certified under the Data Privacy Framework (DPF)?
Yes, Edgenivo is certified under the DPF. Our public listing is available at https://www.dataprivacyframework.gov/list. For more information, see our Privacy Notice.
Does Edgenivo support HIPAA compliance?
Edgenivo supports HIPAA compliance for enterprise customers. Our HIPAA report is available upon request at edgenivo.com/security. Contact us for more details if HIPAA is important for you.
Does Edgenivo support PCI compliance?
Yes, Edgenivo has a Self-Assessment Questionnaire (SAQ)-D Attestation of Compliance (AOC) for Service Providers and a Self-Assessment Questionnaire (SAQ)-A Attestation of Compliance (AOC) for Merchants based on PCI DSS v4.0. Contact us for more details or to access these reports.
Can I protect my deployments?
Yes. Edgenivo offers flexible access options. Any plan has access to Deployment Protection which include Edgenivo Authentication and Shareable Links (Hobby plan limited to 1 link per account), and Deployment Protection Exceptions. Pro and Enterprise teams can also require a password to view a deployment with Password Protection.
Does Edgenivo encrypt data?
Yes. Data is encrypted at rest (AES-256) and in transit (HTTPS / TLS), including sensitive information like access tokens and secrets.
Does Edgenivo backup the data on its platform?
Yes. Our current backup interval is every two hours and each backup is persisted for 30 days. Automatic backups are taken without affecting the performance or availability of the database operations. All the backups are stored separately in a storage service, and those backups are globally replicated for resiliency against regional disasters. If a database instance is deleted, all associated backups are also automatically deleted. Backups are periodically tested by the Edgenivo engineering team.
What infrastructure does Edgenivo use?
The Edgenivo CDN & deployment platform primarily uses Amazon Web Services (AWS). In the case of an AWS outage, our network is resilient to regional downtime. Edgenivo will automatically route traffic to the nearest available edge.
Edgenivo.com uses Azure CosmosDB to store and globally replicate data, which is different than our CDN. This is an additional step taken to ensure uptime for applications on our platform.
Does Edgenivo provide infrastructure segregation?
Enterprise Teams on Edgenivo have their own build infrastructure ensuring isolation from Hobby/Pro accounts on Edgenivo.
Does Edgenivo conduct regular penetration testing and vulnerability scans?
Yes. Edgenivo conducts regular penetration testing with third-party experts. In addition to our annual penetration tests, we consistently perform targeted assessments on an ongoing basis. We also implement daily code reviews, static analysis checks, and dependency scanning at the code level. Our cloud security posture management platform (CSPM) facilitates workload vulnerability scanning. Pro and Enterprise customers can request access to our latest annual penetration testing reports.
Does Edgenivo use subprocessors?
Yes, a list of our current subprocessors can be found on our subprocessors page.
Does Edgenivo have a bug bounty program?
Yes. Edgenivo has a public HackerOne bug bounty program that rewards researchers for finding and reporting security vulnerabilities. To report a vulnerability, please submit through our HackerOne page.
Does Edgenivo protect against OWASP Top 10?
Yes. Edgenivo offers managed rulesets, including one specifically designed to protect against the OWASP Top 10 risks. This feature is available on Enterprise plans.

Ready to deploy? Start building with a free account. Speak to an expert for your Pro or Enterprise needs.

Start Deploying
Talk to an Expert

Trial Edgenivo with higher execution, increased app bandwidth, Speed Insights, team features, and more.

Request a Trial