Security
The purpose of the COVESTING’s Cyber-security framework is to ensure that there are strict measures and practices in place to protect customer assets against any eventualities and threats. The majority of customer digital assets (e.g., bitcoin) are held in our offline wallet system (Cold storage). All customer fiat funds are held separately from company's operating accounts. We are conducting periodical stress tests and security audits to ensure compliance with the strictest security standards.
- 2FA (provided by Google Auth) provides security to the login/registration processes, as well as executing withdrawals.
- SQL injection filters are implemented to verify the authenticity of requests to prevent CSRF attacks.
- Our website traffic runs through encrypted SSL (https).
- We partner with Cloudfare and other vendors to mitigate potential distributed denial-of-service (“DDoS”) attacks.
- All passwords are cryptographically hashed (using bcrypt with a cost factor of 12) while all other sensitive data is encrypted.
- All systems used will ensure the right level of access to authorized personnel with up to date monitoring systems. On-going and proactive security assessments are conducted to keep up to date with new threats and potential vulnerabilities.
COVESTING‘s staff is educated on cybersecurity awareness and adequately trained to perform their information security-related duties and responsibilities consistent with related policies, procedures and agreements. We are compliant with four eyes principles as required by GFSC. All employees undergo criminal and background checks, and are subject to ongoing checks throughout their employment at COVESTING.
