ESDS public cloud has been created to meet all security needs and combat all dangers prevalent in today's online environment. With the most secure public cloud, you can be confident that your application/website/information/database is safe. We ensure that our client's data is kept strictly private to maintain trust and faith in us. We follow the norms and regulations by implementing suitable security measures and encryption algorithms. We are qualified and competent to provide complete protection against data theft and information leaks, as well as to reduce risks and provide simple server security.

ESDS' experience building state-of-the-art, fully secure Datacenter has also been extended to eNlight Cloud Platform and our Data Center as well as the Cloud Infrastructure. We follow the strictest rules to enforce 100% security. Professional security staff rigorously controls physical access to cloud Infrastructure throughout the facility. Modern Security Systems, including video surveillance, biometric access control, and motion and entry detection cameras with alarms, are installed throughout the premise. Our seven-layer security ensures that only authorized personnel can access the Datacenter premises. All visitors are required to provide identification, after which a Staff member continuously escorts them. Datacenter Information and access are limited to a few employees with legitimate reasons and business needs. All-access to ESDS Datacenter is duly recorded and regularly audited to maintain a strict check.

ESDS saves encrypted data on storage systems with various levels of protection. These security layers are further strengthened by best practices for storing cloud data, such as storage isolation from the public network and thick provisioning of storage to avoid sharing. ESDS cloud is built on hardware virtualization technology isolates cloud servers at the hypervisor layer. In addition, the cloud virtualization layer automatically resets a customer's block of storage, preventing one's data from being exposed to the other.

The isolation layer inside the ESDS cloud replicates cloud resources to meet the execution needs of the original server. As a result, servers and apps function on the cloud "as is," with no need for change or redesign and no downtime. The closely integrated components of the cloud can be readily expanded to provide server, application, and data security on physical, virtual, and cloud servers and virtual desktops.

Employees of ESDS cannot read the content of the files you keep in your cloud account, as your data is fully encrypted and our Cloud system administrators can only view the file's metadata (file names and locations). Cloud storage systems are isolated from the public network and safely tucked inside a private network, removing any hazards and assaults posed by the Internet. Traffic to and from the ESDS cloud is routed through multiple high-end Enterprise Firewalls rather than the Internet.

ESDS Cloud uses network virtualization methods to segregate multiple internal and external cloud networks on the same hardware and allocate resources accordingly. This provides sound isolation and controlled network resource sharing among distinct users. In addition, network isolation has several benefits, like restricting viruses and worms spread into the isolated cloud network. Malicious users and external software cannot attack cloud servers because they lack the authentication credentials required to establish communication within ESDS' Isolated Network.

Every consumer is kept in a separate VLAN by a backend L3 switch. This lowers minor network vulnerabilities while also providing considerable protection against typical network security concerns such as Distributed Denial of Service (DDoS) attacks, Man in the Middle (MITM) attacks, IP Spoofing, Port Scanning, and packet sniffing by other tenants. Security is provided on multiple levels: the host's operating system (OS), the virtual instance OS or guest OS, and the Firewall.

• Private VLANs.
• Optional hardware firewall or load-balancing.
• Anti-spoof / anti-sniff firewall technology.
• Customer isolation in the public cloud.
• The ARP access list is used to avoid man-in-middle attacks and IP thefts.
• On request dedicated Firewall Provision with SSL and IPsec VPNs.
• High-end Cisco anomaly detector with sophisticated algorithms to analyze the traffic.
• High-end Cisco anomaly Guard can handle 1Gbit/s traffic to protect the network from DDoS attacks.
• Out-of-Path Traffic filtering system to block malicious traffic without affecting regular traffic.

ESDS has multiple ISP located at the data center, which work in redundancy with each other to ensure minimal downtime. Additionally, ESDS proposes a dedicated virtual Firewall for each department or client to ensure that every traffic passing through it is clean and secure. By providing a higher level of compatibility with client platforms and configurations for remote networks and firewalls, Web VPNs provide more reliable connections. ESDS also offers authenticated and unauthenticated operating system/network vulnerability scans, web application vulnerability scans, and database application vulnerability scans.