Security

Cumulocity is the preferred IoT platform for leaders across industries from telecommunications to medical equipment manufacturers and government institutions, all of whom must meet the most stringent security requirements. Cumulocity has been granted Authority to Operate (ATO) by the US Federal Government, a strong testament to our commitment to the highest level of security.

To ensure the security of our solutions, we undergo rigorous external audits, including ISO 27001, 27017, 27018, and SOC 2.

A platform you can trust

Deploy into air-gapped networks

With Cumulocity, you can confidently deploy IoT solutions in even the most restricted environments, ensuring compliance and peace of mind.

For environments requiring the utmost security measures, with Cumulocity Edge, we offer deployment options tailored to air-gapped networks. This capability enables organizations to adhere to the highest security standards without compromising functionality or scalability.

Deploy into air-gapped networks

Secure devices throughout their lifecycle​

Protect your assets from attack by not allowing bad actors to discover the asset. With Cumulocity, the device connections are always initiated from the device, so no ports are kept open. With secure device bootstrapping processes, X509 certificate based device authentication, over the air software updates, secure remote access, fine-grained device permissions, and many more features, you can be confident that your assets are secure.
Secure devices throughout their lifecycle​

Integrate with your security solutions​

Cumulocity goes beyond offering standalone security measures by seamlessly integrating with your existing security infrastructure. Using your Identity Access Management system, you can efficiently integrate Cumulocity reducing administration costs and ensuring centralized control and management of user identities and access rights across your business applications.
Integrate with your security solutions​

Native multi-tenancy and fine grained access control

Use our native multi-tenancy approach to ensure that the data for each of your customers are 100% segregated.

Within each tenant, your administrators are empowered to enforce security policies through granularly defined fine-grained Role-Based Access Control (RBAC) and contextual device permissions.

This holistic approach to access control strengthens your security posture and also fosters agility and flexibility in managing IoT deployments for all of your customers.

Native multi-tenancy and fine grained access control

Ready to start building IoT solutions that change the game?

Start fast.

Scale easily.

Evolve with the market.

Contact our IoT experts