Posts Tagged ‘PCI Compliant Hosting’

Mobile Payment Security & Compliance

by FireHost Evangelist on November 30th, 2011

There isn’t much we can not do with our smartphones anymore, is there? Making mobile payments is no exception. There’s a coming wave of new apps and technologies that allow consumers to purchase everything through their phone, literally eliminating the need to carry an actual wallet (almost). FireHost senior security engineer Chris Hinkley wrote a guest article for SecurityWeek on the safety of mobile payments and PCI compliance implications.

You can check out the full article to learn more about why mobile payments are still vulnerable, how the PCI Security Standards Council is tackling the issue, and what the next year will bring for this popular consumer trend.

“There is vagueness around the safety of consumers’ credit card numbers when they are transmitted through mobile applications. A website that’s been modified for a mobile platform is presumably safer than an actual mobile application, making the latter considered not compliant according to the PCI DSS Council. If your business is working on a payment app to make transactions easier or more convenient for customers, you must consider this before deploying the app into the iPhone, Android, Blackberry or other marketplace.”
(more…)

FireHost Secures Capital Investment To Support Growth

by FireHost Evangelist on September 13th, 2011

Today, we proudly announce that our Series B round of funding has closed. The investment, led by The Stephens Group as well as earlier angel investors, will fuel investments in growth and infrastructure and enable us to make the company mission of becoming the global provider of secure hosting in the cloud a reality. See the official press release for more details.

“This capital investment represents a huge vote of confidence in our secure hosting solutions for SMEs and our ever-growing enterprise customer base, including several Fortune 50 and many Fortune 500 companies,” said Chris Drake, FireHost founder and CEO.

Looking Back

Since day one, our goal has been simple – provide the most secure hosting solution available to businesses of all sizes. Not an easy task, but with a security-minded ethos and dedication to customer support, we’ve met the challenge and opportunity with brute force.

We’ve experienced triple-digit customer growth year-over-year and successfully secured tens of thousands of web applications in the process. Within the last eight months, we’ve made numerous improvements to our MyFireHost customer portal, including Security View, and the gratifying initiative of launching the industry’s first PCI-DSS 2.0 compliant public cloud. Strangely enough, we believe this merely scratches the surface of our capabilities.

Looking Ahead

This infusion of capital enables us to continue investing in secure infrastructure, increasing our market share in the hosting space, and focus on delivering exceptional security to our customers.

In the coming months, you can look forward to improved:

(more…)

FireHost Joins The Cloud Security Alliance

by FireHost Evangelist on August 3rd, 2011

FireHost is honored to announce a partnership with the Cloud Security Alliance (CSA). FireHost will serve as a member on the CSA Advisory Council and will be working with the other CSA corporate members to support thought leadership and endorse best practices for providing secure cloud hosting environments.

Cloud security is a hot topic throughout the industry and the discussion is not complete without mentioning how the Cloud Security Alliance (CSA) has been influential in ensuring major security issues are addressed and averted. Cloud Security Alliance (CSA), a non-profit organization formed to promote security in cloud computing and education on the uses of Cloud Computing to help secure all environments.

FireHost’s deep experience in virtualized and secure hosting is a welcome expertise for The Cloud Security Alliance,” said Jim Reavis, executive director of the Cloud Security Alliance. “We’re confident FireHost will be an asset in helping the CSA continue to innovate in developing best practices for securing providers in the cloud.

(more…)

Introducing Secure Cloud Servers: A Cloud Environment Like No Other

by FireHost Evangelist on April 26th, 2011

PCI 2.0 Compliant CloudSecurity has arrived in the public cloud. With our latest service release announced today, Secure, Public Cloud Servers have now achieved PCI 2.0 Compliance.

The Origin
The latest PCI Data Security Standard announced in Q4 2010 addresses security and virtualization and all the controversy surrounding these two topics. As a participating member of the PCISSC, we decided to take the Council’s challenge head on by achieving PCI 2.0 compliance for ourselves and creating a secure, public cloud offering unlike anything else in the industry.

The Outcome
Secure Cloud Servers take the scalability and autonomy that makes public clouds so great a step further by providing:

  • High availability for every customer
  • Up to 8 processors
  • Up to 84 GB RAM
  • Unlimited storage available
  • Managed backup snapshots with 14 day retention
  • And more (of course)

(more…)

SSL Your Way to a Safer, More Successful Cart

by FireHost Evangelist on April 13th, 2011

SSL (secure socket layer) Technology is the web standard for securing and encrypting confidential PII (personally identifiable information) on eCommerce websites. Every piece of information transmitted on a https:// page is encrypted by an advanced cipher (often 128-bits or more) to help prevent unwanted parties from obtaining credit card numbers, home or work addresses, passwords, social security numbers, and even just your first and last name in raw format.

Consumers may not know the term SSL certificate, but they do increasingly recognize “secured by”, “protected by” and “verified by” badges on the eCommerce websites they visit.

Unfortunately, each web browser has the ability to determine where and how SSL certificates display, and some of the most popular web browsers suppress SSL badge visibility by decreasing the opacity or moving them to an inconspicuous location on the web page.

Extended Validation (EV) certificates (aka “The Green Bar” to consumers) combat browser suppression because they’re displayed front and center on every page where the SSL certificate has been installed correctly.

(more…)