How Kantrix keeps your sites, your data and your access secure. Our security overview answers the full vendor questionnaire.
Kantrix has two parts. Node software runs on hardware you control. A control plane runs the portal. Every connection between them starts at the node.
Kantrix Sovereign runs the control plane on your own hardware instead, with no outbound connection. Compare the versions.
Kantrix Cloud runs on Amazon Web Services.
| What | Where |
|---|---|
| VM and container disks, and the data in them | Your nodes, at your sites |
| Portal, database, sign-in and email | Amazon Web Services |
| Stored credentials and VM logins | Encrypted with AWS Key Management Service |
| Questions typed into the portal's assistant | Amazon Bedrock. Conversations are stored |
| kantrix.io and status.kantrix.io | AWS, US East (N. Virginia) |
Every request is checked against the person's role and the clients and sites they're scoped to.
Any user can add a second step to sign-in, with an authenticator app or a passkey.
A token never has more access than the person who made it, and always expires: after 90 days by default, a year at most.
Every change is recorded with who made it, when and their role. No one can edit or delete it, not even us.
Credentials for connected services, and generated VM logins, are encrypted with AWS Key Management Service.
Kantrix staff cannot open a console or shell on your devices.
The installer checks the image's signature and checksum before it writes to any disk.
On an installed node, the root and admin accounts are locked. Signing in at the console needs portal credentials.
A node needs no inbound connection from the internet. On your network, it listens only on the ports in our site checklist.
Tests run on every change, and again in the release build, before anything is published.
Each release pins exact image digests, and published images can't be overwritten.
A checker in a second AWS region tests the portal every minute. status.kantrix.io
Our security overview answers more than 60 vendor review questions, and we update it with each release.
Our platform staff can see your inventory in the portal: sites, nodes and workloads. They can't see inside your VM disks, and they can't open a console or shell on your devices.
Yes. Run the backup product you trust inside each VM. Your partner can set it up.
VMs on replicated storage keep running.
Email security@kantrix.io with what you found and how to reproduce it.