Security Library | Yugabyte

July 10, 2024

Discover the Yugabyte Private Bug Bounty Program on HackerOne

As part of our commitment to maintaining the highest security standards and ensuring the integrity of our customers’ data, Yugabyte has partnered with HackerOne, the leading platform for security vulnerability coordination and bug bounty.

We are inviting a select group of ethical hackers to conduct real-time penetration testing on YugabyteDB Aeon, our PostgreSQL-compatible managed cloud DBaaS. Read our blog to discover how you can get involved.

Announcing PCI DSS Level 1 Compliance for YugabyteDB

March 14, 2024

By Michael Haag

Security

Announcing PCI DSS Level 1 Compliance for YugabyteDB

YugabyteDB achieved PCI DSS Level 1 compliance, the highest assurance level, for our fully-managed DBaaS offering. This affirms our commitment to securing highly sensitive data while delivering strong performance. An independent Qualified Security Assessor validated YugabyteDB’s compliance with PCI DSS requirements.

Elevate Your Cybersecurity Game With the CIS Benchmark for YugabyteDB

January 31, 2024

By Sergey Stelmakh

Security

Elevate Your Cybersecurity Game With the CIS Benchmark for YugabyteDB

Announcing the CIS Benchmark for YugabyteDB. Our latest blog explains how this benchmark elevates data security and aids businesses, particularly those in regulated sectors like finance and healthcare, in achieving stringent compliance standards.

Securing YugabyteDB: Evaluating and Selecting the Right Security Tool

January 18, 2024

By Bharat Kumar Mukheja

Security

Securing YugabyteDB: Evaluating and Selecting the Right Security Tool

In this second installment of our blog series on creating a secure DBaaS, we delve into the evaluation and selection of Wazuh, a self-hosted open-source SIEM/SOAR solution. We detail the its deployment within YugabyteDB’s infrastructure, including its integration into our production database nodes and how it captures data from various cloud service providers for comprehensive security monitoring.

Securing YugabyteDB: The SIEM/SOAR Quest

January 16, 2024

By Bharat Kumar Mukheja

Security

Securing YugabyteDB: The SIEM/SOAR Quest

At Yugabyte, we embarked on securing our fully managed DBaaS by evaluating and implementing the right SIEM/SOAR solutions. This 1st blog of a series details the first part of our journey, from outlining requirements to the challenges of finding the right SEIM tool.

YugabyteDB Achieves ISO 27001 Certification

February 8, 2023

By Michael Haag

Company News Security

YugabyteDB Achieves ISO 27001 Certification

YugabyteDB receives globally recognized ISO 27001 certification, demonstrating the maturity of our security program and commitment to protecting customer data.

Achieving PCI DSS Compliance with YugabyteDB

March 31, 2022

By Cyrus Wadia

Security

Achieving PCI DSS Compliance with YugabyteDB

Welcome back to our blog series about how different compliance and regulatory frameworks work and how YugabyteDB can be an essential part of a company’s compliance efforts. In this third installment, we focus on the PCI Security Standards Council’s Payment Card Industry Data Security Standard (PCI DSS). More specifically, we reveal how companies can use YugabyteDB to enable compliance with certain key PCI DSS requirements.

For further details, read our recently published Yugabyte PCI DSS Compliance Guide.

…

Security

Explore Distributed SQL and YugabyteDB in Depth