Secure your websites and data

Stay protected with Anti-CSRF tokens.

Increase the security of your website by leveraging Anti Cross-Site Request Forgery (CSRF) tokens. The system protects websites running on Kentico Xperience against CSRF vulnerabilities with no reduction in website performance. An alternative to traditional protection based on ViewState, the solution uses tokens for the validation of a request.

Create multiple security layers.

With Kentico Xperience, you can separate data, administration, and the live site with different servers to strengthen the security of your overall solution. Plus, the MVC routing passes executed data in a secure way avoiding exploitation. 

Leverage multiple authentication methods.

Protect your data with multiple authentication methods in Kentico Xperience. Utilize forms authentication based on standard ASP.NET authentication, windows authentication, claim-based, multi-factor, or social network authentication. Or implement a custom authentication mechanism for your existing user databases or legacy systems. 

Manage users, roles, and permissions.

Create user profiles with custom fields, import them from external systems, or let visitors create an account by registering on your website. Assign them to any number of roles, and with a predefined set of permissions, grant them access to particular areas of the administration and website content. Leverage personalization-based permissions to restrict access to individual documents or pages.

Cover yourself with double opt-in and reCAPTCHA.

Require users to confirm their registration via email and choose to approve them before they can sign in. Protect your website from spam and abuse by integrating Google reCAPTCHA that provides users with great user experience and enables the detection of bots in just one click.