Two-factor sign-in
Use an authenticator app, with recovery codes for a lost phone. A company can require it for all team members.
Security
Practical protection for your network records
IP records show how your network is built. Here is how we protect them, and what you can control.
Signing in
Protecting every account
Account lockout
After 5 failed sign-in attempts, the account is locked for 15 minutes.
Password handling
Passwords are stored hashed. Temporary passwords must be changed at first sign-in.
Time-limited reset links
Password reset emails contain a one-time link that is valid for 1 hour.
Other devices signed out
When a password is changed, other devices are signed out.
Security emails
Changes to two-factor sign-in trigger a security alert email.
Access
Controlling who sees and changes what
Company separation
Each company's pools, records, team and invoices are kept apart from every other company's.
Roles
Company Admin, User and Viewer roles limit what each person can do.
Access per pool
Users and Viewers see only the pools they are given.
Approval before release
Users cannot free a block by themselves. A Company Admin must approve it.
Controlled API keys
Only Company Admins can create API keys, and they can revoke them at any time.
Recorded support access
When our team opens a support session into a company, it is time-limited and recorded in the audit log.
Audit log
A history you can rely on
Every change records the time, user, action, target, detail and source address. Each entry is linked to the one before it by a SHA-256 hash, so a broken link in the chain can be detected.
- No edit or delete option in the portal
- Search, filter and export to Excel
- Available to every role in your company
Platform
How the service is run
Encrypted connections
The website and portal are served over HTTPS.
Daily backups
The platform database is backed up every day.
Limited database access
The application connects using an account limited to what it needs.
Being clear
What IPAM Enterprise does not do
It helps to know the limits of a tool as well as its features.
It does not touch your network
Devices are records only. The portal never logs in to your equipment or changes its configuration.
It is not a monitoring tool
It tracks what addresses are for. It does not ping addresses or check whether they are in live use.
It manages IPv4 only
IPv6 is not available today. Tell us if you have an IPv6 requirement.
Have a security question?
Ask us before you decide. We are happy to go through the details.