What Security Features Does the Platform Provide?

Explore the enterprise-grade security features included with the illuminis Developer Platform, from encryption and DDoS protection to compliance support.

Enterprise-Grade Security on illuminis

Security is a foundational component of the illuminis Developer Platform, not an add-on. Every application deployed on the platform benefits from multiple layers of security that would typically require significant engineering investment and ongoing maintenance to implement independently. These security services are included in the standard 70/30 revenue share with no additional fees.

Data Encryption

The platform implements comprehensive encryption for all application data:

• Encryption in transit: All data transmitted between users and your application is protected with TLS 1.3 encryption. SSL certificates are automatically provisioned and renewed through AWS Certificate Manager.
• Encryption at rest: All data stored in platform-managed databases, file systems,and backup systems is encrypted using AES-256 encryption. Encryption keys are managed through AWS Key Management Service with automatic rotation.
• Environment variable encryption: API keys, database credentials,and other sensitive configuration values are encrypted and stored in a secure vault, never exposed in logs or deployment artifacts.

Network Security

The platform provides multiple layers of network protection to defend against attacks and unauthorized access:

• DDoS protection: AWS Shield and CloudFront provide automatic mitigation against distributed denial-of-service attacks at the network and application layers
• Web Application Firewall: AWS WAF protects against common web exploits including SQL injection, cross-site scripting,and request forgery attacks
• Rate limiting: Configurable rate limiting prevents abuse and protects your application from excessive request volumes
• Network isolation: Each application runs in an isolated network environment using AWS VPC, preventing cross-application access

Authentication and Access Control

The platform provides built-in authentication services that developers can integrate into their applications without building custom auth systems. Supported authentication methods include email and password, social login via Google, GitHub,and Microsoft, single sign-on through SAML and OIDC protocols,and multi-factor authentication. Role-based access control allows developers to define granular permission models within their applications.

Infrastructure Security

All applications run on hardened AWS infrastructure with automated security patching, container image scanning,and runtime vulnerability detection. The platform uses Amazon ECS with Fargate for serverless container execution, eliminating the need for developers to manage or patch underlying operating systems.

Monitoring and Incident Response

The platform continuously monitors for security anomalies including unusual traffic patterns, authentication failures,and data access patterns. Automated alerts notify the platform security team of potential incidents,and developers receive notifications through the Developer Console when security events affect their applications.

Compliance Support

The illuminis platform infrastructure is built on AWS services and designed with security best practices aligned to widely adopted compliance frameworks. While individual application compliance depends on how developers handle data within their apps, the platform provides foundational infrastructure controls designed to support customers in meeting their compliance requirements.