Security Measures

At Cogworks, we understand that security is a paramount concern for any organisation operating online. That’s why we have made it our mission to embed the highest security standards into everything we do, particularly within our Orama Studio product. Security isn’t an afterthought; it’s a core component of our design, development, and deployment processes.

We are proud to be a registered organisation with Cyber Essentials Plus, a UK government-backed scheme that helps protect organisations against a range of the most common cyber threats. This certification demonstrates our commitment to cyber security and assures our clients that we adhere to rigorous standards in protecting their data.

To ensure our solutions are as secure as possible, we implement OWASP (Open Web Application Security Project) testing throughout our development pipeline. This automated testing serves as a virtual penetration test for every deployment, identifying vulnerabilities before they can be exploited. By incorporating OWASP standards, we provide an additional layer of security, safeguarding your site against common threats such as SQL injection, cross-site scripting (XSS), and other vulnerabilities.

Orama Studio is built with security at its core. We follow a DevSecOps approach, integrating security practices throughout the development lifecycle. This includes regular automated tests against OWASP security policies, stringent practices of not storing sensitive data like passwords or API keys in the codebase, and ensuring that all deployments are secured with the latest patches and updates.

Additionally, Orama Studio benefits from a headless architecture, which separates the website's presentation layer from the CMS and database. This separation enhances security by reducing the attack surface and ensuring that even if the front end is compromised, the critical data remains secure.

We’ve built Orama Studio on Umbraco because we trust it as one of the most secure and reliable content management systems available. Umbraco’s robust security features include a strong user management system, encrypted data storage, and regular security updates that keep the CMS protected against emerging threats.

As an Umbraco Platinum Partner, we have extensive experience working with the platform, which allows us to optimise its security features to the fullest. Our deep knowledge of Umbraco means we’re well-equipped to implement best practices, customisations, and additional safeguards that ensure your site remains secure at all times. The combination of Umbraco’s inherent security and our expertise in managing and securing the platform makes Orama Studio a trusted and resilient solution for your digital needs.

Our commitment to security doesn’t end at deployment. We continuously monitor your website to ensure it remains secure. We conduct regular security audits and use tools like UptimeRobot to monitor site availability, allowing us to respond quickly to any issues. We also provide monthly security reports to keep you informed about your site’s health, including any updates, patches, and security checks that have been performed.

In today’s digital landscape, maintaining robust security is essential to protect your users, your data, and your brand’s reputation. By partnering with Cogworks and using Orama Studio, you’re not just getting a secure platform; you’re getting peace of mind knowing that your digital presence is fortified against the ever-evolving threats in the online world.