Certified to the highest global standards, MAVOCO safeguards your IoT data and systems with robust security measures and rigorous compliance across all operations.
Scale your company with IoT software you can trust
IoT connectivity over mobile networks powers critical infrastructures—from energy and finance to healthcare and beyond. Any disruption can have serious, even life-threatening consequences.
MAVOCO understands the vital role CMPs play in these value chains, and we’re committed to strengthening industry security with our three- layer security approach.
CMP security features for end users
Our Security Profile solution provides:
- Precise control over SMS, data, and voice traffic through customizable whitelist and blacklist rules.
- Automated actions triggered by Kafka notifications to block services when the Security Profile check detects restrictions.
Our CMP CAS/SSO solution provides:
- Centralized, context-based identity and access management for all CMP components, including web applications and API access.
- CMP single sign-on functionality for seamless access to all CMP web applications.
- Centralized API authentication and authorization for all CMP API domains.
- A CAS server infrastructure utilizing centralized identity management with integration capabilities with external IAMs (IdPs).
CMP security by design
We implement state of the art security controls throughout software development and deployment. These controls include encryption and key management, application security, and monitoring and logging mechanisms.
Reach out to gain access to a full description of our CMP security controls security@mavoco.com
Platform & application security:
The CMP consists of a full stack of technologies and modules. Security controls are implemented on all layers from the database to backends, middleware, frontend and APIs. Regular penetration tests and vulnerability scans are performed to proactively identify areas for improvements.
Infrastructure & network:
The MAVOCO DevOps team runs an automated CI/CD process that scans for vulnerabilities and ensures the integrity of all software components delivered to customers' data centers. While customers typically manage the CMP infrastructure themselves, MAVOCO shares best practices to enhance their infrastructure and network security.
Data & identities:
The CMP has a dedicated Central Authentication Service (CAS) that manages all identity controls throughout the entire account management process. Native features include SSO and integration with other identity providers, with all activities logged and monitored.
Secure software development:
MAVOCO software development is standardized and closely monitored, with built-in security controls such as static code analysis, vulnerability scanning, and integrity verification. The DevOps team manages vulnerability patching to ensure ongoing security.
Incident & business continuity management:
If a security incident is suspected, an incident management process is immediately activated. As a European company, MAVOCO adheres to NIS2 requirements for incident reporting. When needed, business continuity and disaster recovery plans are executed according to predefined protocols.