What ensures the privacy of subscriber information, including results from network security audits?
Subscriber information is stored on Qualys dedicated database servers, which are protected from compromise by a defense-in-depth security architecture consisting of dedicated firewall and intrusion detection systems as well as a comprehensive set of encryption technologies. In addition, the servers are located in the center of multiple security rings on a private network that utilizes non-routable addresses. Information pulled from our databases by the subscriber is delivered via a secured 128-bit SSL connection. All subscriber data and reports are strongly encrypted in storage using a 128-bit AES encryption key that is unique to each customer. The customer key is not stored and is not accessible to Qualys or any of our employees.
