Security
Security built into every layer
A monitoring platform sees across your whole estate, so SuperOps is designed on Zero Trust principles: nothing is trusted by default, every access is checked, and every sensitive action is recorded.
Principles
How we protect your workspace
Zero Trust architecture
No user, service, agent or network location is trusted by default. Every request is authenticated and authorized.
Tenant isolation
Each workspace has its own dedicated data stores. Requests can never select another customer's data.
One identity boundary per customer
Every organization gets its own identity environment with its own users, sessions and sign-in policy.
Least privilege
People, services and agents get only the access they need, checked on the server for every action.
Auditability
Security-relevant actions are written to an append-only, tamper-evident audit trail.
Encryption
Data is encrypted in transit, and sensitive fields are protected with per-workspace keys.
PII protection
Personal data, tokens and credentials are masked or redacted before logs and telemetry are stored.
Regional data handling
Telemetry, alerts, backups and AI processing stay in your workspace's region.
In practice
What that means day to day
Identity and access
- Standards-based sign-in (OpenID Connect) with email verification and brute-force protection
- The website and console never see or store your password
- Permissions are enforced by the platform, not by hiding buttons in the interface
- Disabling a user takes effect immediately
Isolation and data handling
- Workspace context comes from your verified identity, never from request parameters
- Dedicated data stores per workspace inside your chosen region
- Telemetry is kept for 30 days; configuration, alerts and audit history are kept separately
- Secrets are referenced from a vault and never stored in plain text
Operations and staff access
- Our staff have no standing access to customer content
- Exceptional support access is time-limited, approved and fully audited
- Each platform service runs with its own least-privilege identity
- Cross-tenant, privilege-escalation and tampering tests are part of every release
Customer data confidentiality
Operating the platform doesn't mean seeing your data
Our staff work with operational metadata. Access to customer content is an exception that needs a reason, an approval and an expiry, and it is fully audited.
What our staff can see
- Workspace status
- Subscription and billing state
- Service health and region
- Usage volumes
- System error codes
Not visible without approved, audited access
- Your telemetry and metrics
- Your logs
- Alert policies
- Machine configuration
- AI conversations
- Credentials and secrets
Found a potential vulnerability? Please report it through our contact page so we can investigate responsibly.
Monitoring you can trust with your whole estate.
Start a free Early Access trial. Your isolated workspace is ready in minutes - no credit card required.