shield_lockSecurity
Our commitment to security
We prioritise security above all, using industry-leading security measures to ensure that your information is safe, secure, and accessible at all times. Discover how we combine advanced tools, rigorous processes, and a culture of vigilance to safeguard your data and operations.
groupsOur team
Dedicated security team
At Maxxton, our dedicated team of security professionals is committed to safeguarding and improving the security of our systems, products and data. The team focuses on:
checkInfrastructure security
checkData security
checkCorporate information security
checkGovernance, risk and compliance (GRC)
checkContinuous security awareness training and testing for all employees
This comprehensive approach ensures that security is integrated at every level of our operations.
monitor_heartMonitoring
Monitoring and incident readiness
check24/7 monitoring: Our systems are continuously monitored for suspicious activities and potential threats.
checkIncident response plan: We have a detailed incident response plan to quickly address and resolve security issues, minimising the impact on our customers.
checkDisaster recovery: Our disaster recovery plans are crafted to reduce disruption in worst-case scenarios, with regular backup validations ensuring data integrity and rapid recovery.
cloud_doneInfrastructure
Infrastructure security
checkGoogle Cloud hosting: Maxxton software operates on Google Cloud, utilising the same advanced security infrastructure and real-time security patches trusted by Google to protect its own system.
checkScalable, self-healing systems: Our infrastructure dynamically scales to meet demand while continuously monitoring the systems’ health, guaranteeing seamless performance.
checkFortified protection against threats: Leveraging Google’s Load Balancer and Cloud Armor, we ensure resilience against DDoS attacks. At the same time, the Web Application Firewall (WAF) with pre-configured OWASP rules actively blocks malicious traffic. Continuous intrusion detection monitoring for suspicious activity, with critical alerts escalated to senior engineers around the clock for rapid response.
verified_userData
Data security and certifications
checkSecure images: We provide robust code security through rigorous manual and automated code reviews to identify vulnerabilities. Additionally, only authorised images undergo vulnerability scans before deployment, providing a secure pipeline.
checkAccess controls: Identity and Access Management (IAM) ensures the Least Privileged Principle is maintained across environments.
checkChange monitoring: Critical changes, such as IAM and firewall configurations, trigger immediate alerts, maintaining accountability.
checkCertifications: PCI DSS, ISAE-3402, and NF525 certified, with annual audits upholding compliance.
checkPenetration testing: Regular external tests conducted by KPMG, Xebia, and Onvio validate our defences.
checkSecure APIs: Our APIs are developed with security as a foundational principle, incorporating robust authentication and authorisation mechanisms.
schoolPeople
Human-centric security
checkRigorous training: To cultivate a strong security culture, employees undergo over 700 hours of annual security training and are required to adhere to security policies during onboarding.
checkContinuous testing: In 2024, we conducted over 2,500 phishing simulations, with our risk rate being 23.4 percentage points below the industry average.
checkDedicated security team: Our proactive security team promotes company-wide collaboration through open forums, so security is a shared responsibility at all organisational levels.
