OpSource Enterprise-Class Security With the constant threat of security breaches, having a clear and robust security implementation is a necessity, not an option. With OpSource Managed Hosting, the solutions necessary to protect our customers' application and data assets are included with the service. OpSource is guided by a “defense-in-depth” security strategy, in which a series of security layers are implemented so that no single solution is relied upon to provide security.

1. ENTERPRISE CLOUD AND MANAGED HOSTING
Enterprise-Class Security
OpSource Security customers are able to configure VLANs between
With the constant threat of security breaches, having servers, configure ACL-based firewalls, and control and
a clear and robust security implementation is a track administrative usage. Data is
necessity, not an option. With OpSource Managed encrypted while being transferred as well as at rest.
Hosting, the solutions necessary to protect our
customers' application and data assets are included OpSource Cloud Servers and OpSource Cloud Files, our
with the service. OpSource is guided by a cloud-based compute and storage services, can be
“defense-in-depth” security strategy, in which a series linked by OpSource Cloud Networks, our
of security layers are implemented so that no single customer-controlled network configuration services.
solution is relied upon to provide security. Rather than implementing our network security on top
of our virtualized servers, OpSource Cloud Networks is
Secure Datacenters a truly network-based implementation running within
OpSource delivers its Cloud and Managed Hosting our Cisco switching fabric. Customers manage and
Solutions from top-tier colocation facilities in the configure OpSource Cloud Networks via the web-based
Sunnyvale, CA; Ashburn, VA; London, UK; and Paris, OpSourceCloud.net user interface or Open API.
France. Our facilities meet or exceed Tier III
standards, the highest commercially available Customer-Controlled Network Configuration
datacenter rating as measured by the Uptime • Configurable Layer-2 VLANs based on Cisco-based
Institute (http://uptimeinstitute.org/). Network switching fabric
connectivity is provided Global Tier-1 IP Networks. • Customizable ACL-based firewall rules allow you to
control access into each network VLAN
• All areas within the facility are monitored 24x7x365 • NAT and VIP functions to expose your private IP
by closed-circuit cameras and onsite guards addresses to the public Internet
• OpSource data center space is physically isolated • Load-balancing and port translation across multiple
and accessible only by OpSource administrators virtual servers, with the ability to take servers in and
• Access is restricted by authorized personnel through out of service manually, programmatically, or based
biometric two-factor authentication on monitoring probes
• CCTV digital cameras cover the entire center, • Layer 2 Multicast support for clustering
including cages, with detailed 24x7 surveillance and implementations
audit logs
Encryption
OpSource Cloud Hosting Security • Data stored with 256-bit encryption at rest and
OpSource Cloud Hosting provides the security and 128-bit SSL encryption while in transit
control enterprises demand. Unlike other commodity
cloud services, OpSource provides an environment to Secure Access
configure and lock-down your compute and storage • Access to OpSource Cloud via the Public Internet,
environments. With Opsource Cloud Networks, MPLS, VPN, Carrier Ethernet or Private Networks
© 2010 OpSource, Inc. All rights reserved. Page 1 of 2

2. ENTERPRISE CLOUD AND MANAGED HOSTING
OpSource Cloud Hosting Security (cont’d) Intrusion Detection
Role-based Administrative Control • Fully-managed Intrusion Detection System (IDS)
• VPN administration of all servers utilizing signature, protocol and anomaly based
• Unique username and password for multiple inspection methods
administrators
Edge-to-Edge Security Visibility
• Role-based permissions allow administrator to limit
• Edge-to-edge security, visibility and carrier-class
to manage only certain resources, such as servers,
threat management and remediation utilizing
storage or networks.
industry leading Arbor Networks Peakflow to
Reporting compare real-time network traffic against baseline
• Audit logs of all environmental changes definitions of normal network behavior, immediately
flagging all anomalies due to security hazards such
Compliance as:
• OpSource maintains SAS-70 attestation in
conjunction with our auditor SAS 70 Solutions. Our Denial of Service
SAS-70 attestation is based on an in-depth series of • Denial of Service (DoS) and Distributed Denial of
documented controls covering the operational Service (DDoS) attacks, worms or botnets
management of the OpSource Cloud Hosting
Secure Access
infrastructure.
• Access to OpSource Cloud via the Public Internet,
24x7 Incident Response MPLS, VPN, Carrier Ethernet or Private Networks
• OpSource Security Incident Response Team (OSIRT)
SAS 70 and PCI Compliance
to handle reports of security incidents. The OSIRT
• OpSource maintains SAS-70 attestation in
will escalate the incident to law enforcement and/or
conjunction with our auditor SAS 70 Solutions. Our
executive management as prescribed in security
SAS-70 attestation is based on an in-depth series of
policies.
documented controls covering the operational
management of the OpSource Cloud Hosting
OpSource Managed Hosting Security
infrastructure.
With the constant threat of security breaches, having
• OpSource offers a PCI-compliant environment that
a clear and robust security implementation is a
implements a number of security measures required
necessity, not an option. OpSource is guided by a
for applications storing, transmitting, or processing
“defense-in-depth” security strategy, in which a series
credit or debit card information
of security layers are implemented so that no single
solution is relied upon to provide security. 24x7 Incident Response
• OpSource Security Incident Response Team (OSIRT) to
Firewall
handle reports of security incidents. The OSIRT will
• Fully-managed, hardened, stateful inspection
escalate the incident to law enforcement and/or
firewall technology with customized
executive management as prescribed in security policies.
customer-specific firewall rules
Company Corporate Headquarters
OpSource provides cloud and managed hosting solutions that enable businesses of all sizes to accelerate
5201 Great America Parkway, Suite 120
growth and scale operations while controlling costs and reducing IT infrastructure support risks. More
than four hundred Software-as-a-Service ISVs, cloud platform providers, carriers and enterprises rely on Santa Clara, CA 95054
OpSource's expertise, experience and agility to operate high-availability, business-critical hosting 408-567-2000
environments. Our industry-leading Application Operations service goes beyond traditional hosting by
sales@OpSource.net
providing application management, change management, performance management and application
optimization. OpSource Cloud is the rst cloud to bring together the exibility, availability and
community of the public cloud with the security, performance and control the enterprise demands.
Founded in 2002, OpSource is SAS 70 Type II, PCI DSS Level 1 and European Safe Harbor certi ed and has www.OpSource.net
operations in California, Virginia, UK, Ireland, and India.
© 2010 OpSource, Inc. All rights reserved. Page 2 of 2