Security

Security

Usage Engine is built with a strong focus on security and has a password policy that conforms to NIST 800-63B. It provides the following security features: 

  • Token based authentication. 

  • Role base access control. 

  • OIDC Identity Provider. 

  • Encryption at rest – using tools to encrypt the data before writing it to storage.  

  • Encryption at transit – Using TLS encryption (note – a few agents/protocols still do not provide TLS. If encryption at transit is needed for such features, it must be enabled in the networking layer). 

  • Immutable images, scanned with image scanners for CVEs. 

  • Automated certificate management, using the cert-manager tool to integrate with CA.