DealTrax Security ®

At DealTrax.com, we know that security is critical to your business. As a result, DealTrax.com provides state-of-the-art security, partnering with the world’s best hosting facility, Rackspace Managed Hosting. Together, we ensure that your data is never compromised or lost and that our servers are always working properly. Rackspace Managed Hosting protects you with the industry's most powerful security tools and techniques designed, built and maintained specifically for enterprise-class Web operations.

Rackspace offers a comprehensive suite of security technologies including:

Infrastructure
Security starts at the data center and includes traditional locks, access controls and biometric surveillance systems. Robust fire suppression, HVAC, power feeds, hot-swappable servers and routers are available in the event of an outage. Background checks and certifications ensure the integrity of all personnel.

Network
Rackspace's 100% Cisco-Powered Network, built on hardened routers and audited by Cisco, ensure maximum security protection. Their network incorporates a patented Intrusion Detection System to protect against external threats.

Firewalls are managed by security specialists and deployed in a “private IP” space, while customer servers and routers are segregated in Virtual Local Area Networks (VLAN). Network security features also include multi-level privileges, OS lockdowns, centralized authentication and device change logs.

Hardware
All Operating Systems are loaded, hardened and managed to ensure proper security. By maintaining on-site inventories, Web laboratories and automated deployment systems — in addition to close relationships with key hardware vendors — Rackspace guarantees hardware availability.

Applications
Their security regimen also addresses the inherent vulnerabilities of applications, including enterprise databases, Microsoft IIS, Apache, Linux, mail services, FTP servers, DNS and streaming media. Rackspace implements firewalls and deactivate non-essential features to further protect applications.

Security Patching
By constantly updating security systems, Rackspace ensures optimum protection for our customers. Rackspace monitors and addresses emerging threats, and quickly processes and applies new security patches.

Threat Analysis
Rackspace employs advanced technologies to identify and address security weaknesses in Web-oriented servers, applications and activities. We constantly examine all firewalls, load-balancers, SSL accelerators and switches, as well as external developments, for any potential security events.

Forensics
Should a security event occur, Rackspace can conduct a comprehensive post-incident examination designed to reduce the risk of future threats. By documenting dollar losses, if any, Rackspace can help justify the involvement of the FBI or other law enforcement agencies.

Security Testing Laboratory
Rackspace subjects all devices to full security testing before they are deployed — including the installation and configuration of the Operating System, the disabling of vulnerable or unneeded services, and advanced vulnerability tests.

Certified Engineers and Security Teams
Rackspace's security specialists have earned Cisco Certified Security Professional, Certified Information System Security Professional and other security certifications.

In addition to the Rackspace comprehensive suite of security technologies, DealTrax offers the following security technologies:

Data Encryption
DealTrax.com uses the strongest encryption products to protect client data and communications, including 128-bit SSL Certification. The lock icon in the browser shows that data is fully protected from unauthorized access while in transit.

User Authentication
Users access DealTrax only with a valid username and password combination, which is encrypted via SSL while in transmission. Users are prevented from choosing weak or obvious passwords. An encrypted session ID cookie is used to uniquely identify each user.

Application Security
Our application security model prevents one DealTrax.com client from accessing another's information. This security model is maintained with every request and in effect for the entire duration of a user session.

Internal Systems Security
Inside of the perimeter firewalls, the systems are safeguarded by network address translation, port redirection, IP masquerading, non-routable IP addressing schemes, and more. The specific details of these features are proprietary.

Operating System Security
DealTrax.com enforces tight operating system-level security by using a minimal number of access points to all production servers. All operating systems are maintained at each vendor's recommended patch levels for security and are hardened by disabling and/or removing any unnecessary users, protocols and processes.

Database Security
Whenever possible, database access is controlled at the operating system for additional security. Access to all databases is restricted to a limited number of points.

Backup and Recovery
Having a well-planned backup strategy is the most effective way to protect your vital data. With the number of hacks and viruses on the rise, properly backing up and storing your data has never been more important.

Rackspace provides complete backup, storage and retrieval services for your data by utilizing a powerful suite of technologies paired with our backup best practices. Our services include:

• Scheduling:
  Rackspace performs all backups using their high-performance private network, and employs weekly full backup and daily differential backup procedures.
• Integrity Testing:
  Rackspace's experienced engineers test and confirm that all backups have been performed correctly and that your data is fully secured. Backups which experience any problems are immediately replicated and re-tested. They employ enterprise software to manage centralized data storage activities.

View the DealTrax Service Level Agreement (SLA) with Rackspace

View details of the Rackspace Superstructure

View Rackspace Security Details

View Rackspace Industry Awards