Softnix Logger prioritizes the security of event logs, network information, and organizational usage data. It is designed for environments that require data control, traceability, and structured security governance.
This document provides a public-facing overview of Softnix Logger security measures for customers and users. It avoids internal technical details, deployment-specific implementation details, and information that could affect system security.
1. Security Overview
Softnix Logger is a platform for collecting, storing, analyzing, and reviewing logs from systems and devices across an organization. It supports both single-node deployments and separated deployments for larger environments.
The platform supports on-premise deployment, helping customers keep log data and security event information under their own organizational policies.
2. Authentication and User Management
Softnix Logger supports system user accounts and can integrate with enterprise identity systems such as LDAP or Active Directory, allowing customers to align access with existing user management processes.
The system supports Two-Factor Authentication (2FA) to strengthen login security and reduce the risk of unauthorized account use.
Session and token handling are designed with limited lifetimes, renewal, and logout flows.
3. Access Control
Softnix Logger uses Group-Based Access Control and Role-Based Access Control to define permissions by group, role, and user responsibility.
Administrators can define which groups may access capabilities such as log viewing, search, configuration, user management, and audit log review.
The system also supports restricting access by data source, such as channels or log sources, so users see only the log data relevant to their responsibility.
4. Data Protection
Data exchanged between users and the system is protected with encrypted HTTPS/TLS connections to reduce the risk of interception or tampering in transit.
Log data and related system data are separated by purpose, such as raw logs, processed logs, analytics data, user information, configuration, and audit logs. This supports appropriate access control and data management.
Retention and storage policies can be configured to align with customer policies, storage requirements, and compliance obligations.
5. Application Security
Softnix Logger includes application and API security controls such as:
- Permission checks before access to sensitive data or functions
- Access limited to authorized users
- Log validation and processing before analytics ingestion
- Security headers to reduce browser-based risks
- Separation of privileges between general users, group administrators, and system administrators
These controls help reduce risks such as unauthorized access, data exposure, privilege misuse, and malformed data ingestion.
6. Audit Logging and Traceability
Softnix Logger includes audit logging for important system events such as login, logout, user changes, permission changes, system configuration changes, and access to sensitive information.
Audit logs help administrators investigate events, review activity, and support security governance processes.
Access to audit logs is controlled by permissions. General users can access only records relevant to themselves or their authorized scope, while administrators can review information needed for system management.
7. Infrastructure Security
Softnix Logger supports deployment in isolated and controlled environments such as on-premise servers or containerized environments.
Internal services can be designed so they are not directly exposed to external networks, with user traffic routed through a reverse proxy responsible for encryption, request handling, and communication security policies.
For large environments, log ingestion, processing, storage, and search can be separated to improve scalability, flexibility, and access boundary control.
8. Deployment Options
Softnix Logger supports multiple deployment models based on customer security and operational requirements, such as:
- On-premise deployment
- Single-node deployment for smaller environments
- Separated deployment for larger environments or high log volume
- Deployment in environments with controlled external connectivity
- Deployment in environments requiring high network isolation
9. Continuous Security Improvement
Softnix continuously improves security controls across access control, encryption, configuration review, secret management, infrastructure hardening, and security testing within the development lifecycle.
10. Security Reporting
If customers identify a security concern, they may contact the system administrator or Softnix support team so the issue can be reviewed and handled through the appropriate process.