Automatic "banking-grade" security & analytics

The security of user and customer data is the number one priority for most organizations and, for a number of years, Fortune 500 companies have relied on Kony’s solutions to deliver critical apps and handle sensitive data securely.

In a recent audit report by Cigital Security (a leading security consultancy) they commented

There are too many layers for an attacker to even begin justifying an attack on this software unless it contained some high value reward. Assuming that this reward existed, it would take an attacker far longer to compromise the software than the time provided even to make a dent in the armor...

Security is at the core of everything we do. Providing automated protection of apps built on the platform.

• Source Code Protection Library (to protect source code and business logic)
• Code & Control Flow obfuscation
• White Box Cryptography
• Binary Protection against static and runtime attacks

We have incorporated security enabling technologies...

• APIs built for security - FIPS 140-2 compliant crypto libraries
• Securely perform Authentication, Authorization, User & Session Management, Input Validation, etc. features to prevent man-in-the-middle attacks (MITM).

...and passed a number of security certifications and compliance standards

• PCI DSS certified, SSAE 16 SOC 2 compliant
• HIPAA compliant
• ISO 27001:2013 certified
• STIG/SRG compliance with DISA

Security is and will always be at the very core of Kony’s solutions. Kony allows you to quickly and easily ensure the apps you deploy are protected, adhere to industry regulations, and align to your existing governance policies.