Security & governance
Enterprise-Grade Infrastructure and Tenant Protection.
A platform that holds your vulnerability data has to be harder to breach than the systems it describes. These are the controls built into AegisVMP.
Database isolation
- PostgreSQL row-level security forced on every tenant table
- Each request runs in the context of a single tenant
- Operators have no visibility into customer data
Access & authentication
- Granular permissions grouped into roles (RBAC)
- Passwords hashed with Argon2id
- Mandatory TOTP multi-factor authentication
- Account lockout after repeated failed attempts
Auditability
- Immutable audit log
- Sign-ins and failed sign-ins recorded
- Privilege and role changes recorded
- Report downloads recorded
Data & privacy
- TLP 2.0 classification on reports
- Integration credentials encrypted at rest
- 15-minute access tokens
- HTTP-only refresh cookies
AI boundary
AI that can read, but never write
AI features use read-only tools over the requesting tenant's data. They cannot modify findings, scores or remediation tasks.
Review our security posture with us
Request a walkthrough of AegisVMP and see how unified intelligence changes what your team works on first.