Very Good Security (VGS) lets companies use and exchange any kind of sensitive data without ever needing to see or hold the data itself. Built on the premise that “you can’t hack what isn’t there”, VGS is on a mission to protect the world’s information by transforming security and privacy from a business obstacle into an opportunity. VGS provides a developer-friendly platform to act as a custodian for sensitive data, improving security while also accelerating business growth without the cost or liability of securing the data themselves.
SaaS, Premium Self-Hosted, or FREE OSS Self-Hosted
Enterprise Single Sign On (SSO) SAML SSO enables a secure authentication via an organization’s Identity Provider (IdP), as opposed to users or IT admins managing thousands, of usernames and passwords. With our product SAML Jackson, enterprise users can access your product via one of their secure IdPs (like Okta, Microsoft Azure, AWS, etc), which manages access and security for the entire organization.
Directory Sync Organizations use directories from different providers to manage users and enforce their access to organization resources. By integrating our Directory Sync product into your solution you can activate and deactivate user accounts, create groups, and keep your app in sync with the user directory in real-time. Supports the SCIM 2.0 protocol.
Additionally, we offer Audit Logs to track critical events in your application and a Data Privacy Vault to safeguard sensitive data.
No features have been listed yet.
No Very Good Security videos yet. You could help us improve this page by suggesting one.
BoxyHQ's answer:
BoxyHQ stands out for its comprehensive suite of security building blocks tailored specifically for developers. With features like SAML/OIDC Single Sign-On (SSO) and Directory Sync with SCIM 2.0, BoxyHQ simplifies identity management and access control for B2B SaaS companies. Its focus on providing a seamless and customizable solution empowers developers to enhance security without compromising user experience. Additionally, BoxyHQ offers Audit Logs to track critical events within the product and a Privacy Vault, an API to protect sensitive data.
BoxyHQ's answer:
BoxyHQ stands out for several reasons:
BoxyHQ's answer:
BoxyHQ's primary audience encompasses:
BoxyHQ's answer:
The inception of BoxyHQ is deeply linked with Deepak's journey as the former CTO of a cybersecurity scaleup. In his role, Deepak wrestled with the challenge of allocating resources to enterprise compliance features that diverged from their core value proposition. Alongside Sama, they witnessed the escalating tide of cyber crimes, compounded by the concerning statistic that around 70% of development teams often bypass essential security measures due to time constraints. Motivated by this shared purpose of bringing security earlier in the developer live cycle, they embarked on a mission to address these challenges head-on. BoxyHQ emerged as a solution designed to automate product security and provide low-code APIs for seamless integration, empowering developers to implement enterprise-compliant security measures effortlessly. Through BoxyHQ, Deepak and the team strive to alleviate the burden on development teams while fortifying organizations against the escalating threats posed by cyber crimes.
BoxyHQ's answer:
We value the confidentiality of our large enterprise clients due to NDA agreements. However, some of our notable customers include Cal.com, Dub, Supademo, Spike, among many others.
BoxyHQ's answer:
BoxyHQ uses the following technologies: - Next.js - PostgreSQL - Docker - Kubernetes
Based on our record, Very Good Security seems to be more popular. It has been mentiond 3 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Actually, PCI Compliance is largely a solved problem. Use something like https://verygoodsecurity.com and wrap the proxy around Lago and your self hosting will qualify you for the easiest PCI compliance tier. (Disclosure: I founded Very Good Security & was the CEO for 8 years). - Source: Hacker News / 28 days ago
You also asked about the security of this data, which is a great question. At Gem, we've gone the painstaking lengths to protect this information. We partnered with a firm VeryGoodSecurity (https://verygoodsecurity.com) to securely vault all personally identifiable information. You can read their security statement here: https://www.verygoodsecurity.com/docs/security/security-statement. Source: over 2 years ago
The way we approached this is to use a vendor. Basically, the part of our app that collects card data is literally a small iframe. That iframe proxies calls to the vendor (we used verygoodsecurity.com, their VGS collect product) so that we never are actually aware of the card data. They return to us a token we store in our database, so we can work with the card and have no actual knowledge of the card. Source: about 3 years ago
Secureframe - Get enterprise ready with SOC 2 and ISO 27001 compliance
Auth0 - Auth0 is a program for people to get authentication and authorization services for their own business use.
Vanta - Automate compliance, simplify security.
Skyflow - Skyflow’s data privacy vaults deliver security, compliance and governance via a simple API
Drata - Put SOC 2 Compliance on Autopilot
Frontegg - Elegant user management, tailor-made for B2B SaaS