Kloudfuse Security
Kloudfuse is a unified observability platform, designed for modern, cloud-native environments. It provides deep, correlated insights across all telemetry types — metrics, logs, traces, and events — through a high-performance architecture.
Kloudfuse delivers a secure, scalable, and high-performance observability solution for enterprises. Its unique architecture ensures data privacy while offering enterprise-grade security features across identity, data, and operations.
This document outlines the key security features and practices of the Kloudfuse platform.
Platform Architecture and Deployment Model
Kloudfuse employs a hybrid deployment model:
- Data Plane
-
Deployed entirely within the customer’s cloud account, the Data Plane ingests, stores, and processes telemetry data locally. This approach ensures data privacy and compliance.
- Control Plane
-
Optionally managed by Kloudfuse to monitor the health and lifecycle of the Kloudfuse deployment.
Platform architecture enables Kloudfuse customers to retain full control over their data, while benefiting from SaaS-like operational ease.
Infrastructure and Physical Security
Because the data plane resides within the customer’s cloud infrastructure (AWS, Azure, GCP), the customer and their cloud provider manage the physical and infrastructure-level security. This approach ensures high level of security and alignment with industry standards.
Identity and Access Management
- Role-Based Access Control (RBAC)
-
Users have assigned roles with specific permissions, ensuring the principle of "least privilege".
- SSO/SAML Integration
-
Enables enterprise-grade authentication mechanisms to streamline and secure access control.
- Ingest Authentication
-
Validates and authorizes incoming telemetry data from trusted sources.
Data Security
- Data Residency
-
All telemetry data resides in the customer’s cloud account.
- Log Classification and Handling
-
Ingests various log types (application, security, system, network) with flexible parsing and indexing.
- Log Archiving and Hydration
-
Cold storage for logs and on-demand retrieval capabilities ensures data availability, while optimizing costs.
Network Security
- Multi-AZ Deployments
-
Ensures high availability and disaster tolerance.
- Secure Communication
-
Supports TLS encryption for data in transit.
Vulnerability and Patch Management
- Regular Release Cycles
-
Address CVEs and apply security patches.
Customers can monitor updates through our Release Notes.
