How Secure Are LOCKBOX Products?

You are here: Home » Our Technology » How Secure Are LOCKBOX Products?


We take protecting your sensitive data very seriously. And it shows.

Protecting data against today’s threat landscape requires more than just a $50 SSL certificate. See for yourself how we are protecting your data.

  • Secure design and development process
  • Design: Defense in Depth
  • Design: Secure Defaults
  • Design: Separation of Data
  • Design: Reduced Attack Surface
  • Design: Non-Repudiation
  • Design: Automated protection of data at rest
  • Design: Automated protection of data in transit
  • Design: Automated data expiration and availability
  • Design: Patent-pending geo-spatial protection
  • Design: Multi-factor authentication
  • Development: FIPS-approved encryption implementations
  • Development: Advanced Encryption Standard (AES) 256 for all symmetric data encryption operations
  • Development: Variable length RSA for all asymmetric encryption operations
  • Development: Mandatory input validation for all un-trusted inputs
  • Development: Parameterized stored procedures for all database operations
  • Development: Data encoding for all un-trusted inputs
  • Development: Generic exception/page handlers
  • Development: 100% managed code implementation
  • Development: Anti-recovery data removal
  • Development: Automated temporary account lockouts and IP black-listing
  • Testing: Code reviews using expert review and automated code analysis
  • Testing: Automated test suite with 250+ unit tests
  • Deployment: Minimum 2048-bit SSL certificate to protect data in transit
  • Deployment: Least Privilege deployment
  • Deployment: Reduced Attack Surface deployment
  • Deployment: Generic exception handling
  • Deployment: Forced, platform-based session data protection and validation
  • Deployment: HTTP Strict Transport Security (HSTS) enabled for all requests
  • Deployment: Platform-based protection against common Web-based attacks
  • Deployment: Automated session expiration
  • Deployment: White-list firewall implementation
  • Deployment: Integrated system authentication for all backend services
  • Maintenance: Security patches deployed within 24-48 hours of public release and verification
  • Maintenance: Vulnerability scanning using proprietary, commercial and public tools
  • Maintenance: Self and partner conducted penetration tests
  • Maintenance: Regularly scheduled system account password changes
  • The LOCKBOX Team: Experienced professional legal hackers
  • The LOCKBOX Team: No criminal records
  • The LOCKBOX Team: Former Fortune 100 senior security team members
  • The LOCKBOX Team: Published authors on Internet security
  • The LOCKBOX Team: Frequent invited conference speakers
  • The LOCKBOX Team: Recognized by major corporations for security research contributions
  • The LOCKBOX Team: CISSP certified

What is your data protection provider doing to protect your data?


  • About LOCKBOX LLC

    LOCKBOX provides managed data protection solutions to businesses, professionals and individuals. We serve our customers by combining our deep expertise in data protection and our passion to create elegant and effortless software solutions.