Cybersecurity

XOne guarantees secure access to applications and data with a more modular and responsive approach to security.

To prevent attacks and threats, we apply an Advanced Security Policy that makes it possible to establish, monitor and maintain secure perimeters for access to networks, applications, devices and data.

XOne is certified under the Esquema Nacional de Seguridad (ENS, Spain’s National Security Framework, MEDIUM category) and ISO/IEC 27001:2022.See our certifications

XOne Broker DMZ

Stay in control of your information.

The XOne DMZ Security Broker is a protection system against web-based attacks that separates all communications between the central server and the devices. The system is designed to deploy as many brokers as deemed necessary.

The Broker’s objectives are:

• Prevent identity spoofing
• Prevent denial-of-service (DDoS) attacks

The system establishes communications between mobile devices and the central server with the following properties:

• WebSocket or REST (configurable)
• Enabled under the SSL protocol (encrypted over SSL)
• Agile (they improve performance over the Replication Proxy architecture)

IDS Core

Total interconnectivity.

It is the core of any identity and access control infrastructure. It identifies the user and manages which resources they can access.

It provides a stable identity for users across all the apps in our system.

XOne offers a very comprehensive IDS Core solution to manage identities across different platforms, systems and services.

It is a system that authenticates, authorizes and secures both the apps and the users in our developments.

IDS Core can connect and manage a wide range of identities across different applications, APIs, clouds, mobile devices, IoT…

It implements common protocols, keeps apps secure and follows security and control standards, so that the usability of our apps is not affected.

Benefits of IDS Core

• Protects your resources
• Client and user authentication
• Session management and single sign-on
• Client administration
• Issuing of identity and access tokens to clients
• Token validation

Secure your apps with IDS Core

Outsourcing core security functions to a security token service avoids duplicating functionality across apps and endpoints.

LDAP authentication

Authentication is required when an application needs to know the identity of the current user. These applications typically manage data on behalf of that user and must ensure that the user can only access the data they are authorized to see.

The most common authentication protocols are SAML2p, WS-Federation and OpenID Connect.

API access

Applications have two fundamental ways of communicating with APIs: using the application’s identity or delegating the user’s identity. Sometimes both methods are combined.

We have the right security tools to protect digital assets against any threat and to guarantee the protection of our clients.

Biometric systems

A convenient, fast user experience.

At XOne we focus on protecting all our processes in order to protect our users and clients and, in the case of corporate apps, employees. Our strategy is to guarantee and protect.

That is why our security solutions include advanced, secure and reliable biometric solutions, since they are the safest way to prevent fraud and speed up processes, building trust among our clients and users.

Touch ID

It is a fingerprint recognition system whose main function is unlocking apps and devices, and a secure authentication method.

It compares fingerprints and detects whether or not the user is identified.

In addition, this functionality can be linked to the digital signing of documents, and can grant or deny permissions to perform certain actions that require a high level of identity authentication, such as deleting information, accessing payments…

Fingerprint biometric technology is the most widespread thanks to its maturity, cost, usability and speed of identification.

It offers high reliability, security, ease of use and stability.

Face ID

Like the previous solution, it allows devices and apps to be unlocked securely thanks to a facial recognition sensor.

It is a very useful feature not only for granting permissions to users, but it can also be used in low-light areas.

Unlike other biometrics, such as iris or fingerprint, this technology is non-intrusive and requires no cooperation from the user.

Advanced anti-fraud (DNI 3.0)

Fraud prevention and protection.

This security module is an automatic document capture and recognition solution designed to identify and detect fraud in DNI (Spanish national ID cards) and passports.

It can detect whether a document is an original or a copy by means of infrared light checks and comparison with the biometric data stored in the documents.

It is a solution for user authentication through the DNI on devices with NFC technology.

Simply by bringing the reader within a very short distance, a data exchange is established that is faster and has greater capacity than other systems.

Multi-factor authentication system

A very high level of security.

XOne integrates this strong authentication system in order to increase transaction security and prevent online fraud, using multi-factor authentication in banking operations (two or more factors).

Payment Services Directive 2 (PSD2) is a European regulation for electronic payment services.

Multi-factor authentication is performed by sending SMS messages, which are used to verify the user’s identity and authorize transactions.

Using multi-factor authentication has many advantages:

• Prevents cyberattacks
• Adapts to all ways of working
• Complies with regulatory restrictions
• Simplifies the access experience for users

Electronic signature module

Biometric signature (ISO 19794-7)

It allows legally binding documents to be signed with a handwritten signature captured by digital devices: smartphones, tablets…

Developed for the leading platforms: Android, iOS and Windows.

With XOne no data connectivity is required: the entire signing process takes place on the device. The signature is never stored separately from the document.

A timestamp and coordinates can be added (in this case coverage is required).

The signer always sees what they are signing (WYSIWYS, What You See Is What You Sign).

XOne’s biometric signature, by means of an advanced electronic signature, ensures legal compliance.

It allows the document (PDF with embedded biometric signature) to be reviewed, with page turning and zoom, and adds the ability to fill in and save PDF forms.

Digital signature

The digital signature mechanism consists of authenticating that any of the data contained in a document at a given moment is exactly what the user entered when the document was created, reviewed, executed, etc.

A document can be signed as many times as needed, so the data stored with the digital signature includes the date and time the process was carried out, the user who performed it and the certificate used.

XOne offers two mechanisms for digitally signing documents: simple signature and Windows signature.

Secure payments and transactions

Integration with all payment gateways

XOne is integrated with various external payment methods, such as the Pinpads from ITOS, a company with which XOne maintains close R&D collaboration in these payment methods. XOne’s roadmap also includes the native implementation of NFC for terminals that support it, through simple interfaces of the XOne programming engine.

It is a highly advanced and secure tool for handling operations, data and payment management that allows all kinds of transactions to be carried out through 100% customizable payment gateways.

It ensures data confidentiality and protection, encrypting sensitive information and guaranteeing that it is transferred immediately, securely and easily.

It follows SSL security protocols, address verification systems (AVS) and all current security regulations.

XOne allows easy integration with any payment platform. It currently has several certified payment devices (Pinpad), including:

• Itos Technology, S.L. (Redsys): B-50 and IC 20
• Ingenico (AXIS): ICMP and IWL 222
• Wannme
• Openpay
• Google Pay
• Apple Pay

In addition, XOne has certified the ADDON Payment payment platform.

Only with XOne will you have the confidence of knowing your company is secure

Data Loss Prevention

The data loss prevention module is a security tool that makes it possible to anticipate, prevent and mitigate the potential loss of transferred information.

It inspects and controls the transfer of files containing confidential or sensitive information, with the aim of protecting them and ensuring a reliable and secure working environment through cross-platform encryption designed to protect data both locally and in the cloud.

Security Monitor

XOne provides constant monitoring to generate customized reports with relevant real-time data for decision-making and problem solving.

It monitors security events and device usage in real time, by individual, department, role, project…

Real-time monitoring and analysis make it possible to preserve the security of mobile data, as well as to detect threats, incidents or unusual behavior, such as large data transfers or downloads of confidential files.

Security Warning

This advanced security module is a proactive solution for detecting incidents: it lets you configure automatic responses and alerts for security threats, excessive data usage or hardware failures.

It automatically detects any threat that may occur, such as network attacks, attempts to eavesdrop on data traffic, phishing or malicious sites…

We protect every area of the business. XOne, with built-in intelligent security.

Cybersecurity mesh

One of the fastest-growing trends in 2022.

The goal of the security mesh is for all the tools (antivirus, firewalls, proxy servers, vulnerability scanners…) available to a team or a workspace to interoperate with each other. This creates a security perimeter that protects users from all kinds of threats.

This type of security system is essential at a time when more and more sensitive information is stored in the cloud, which can also be accessed from many devices.

Instead of each security tool working in a silo, a cybersecurity mesh allows tools to interoperate through several supporting layers, such as consolidated policy management, security intelligence, identity fabric…

A cybersecurity mesh makes it possible to:

• Reduce deployment times and security failures.
• Increase agility and resilience.
• Focus on higher-value tasks.

The result is a more flexible, composable and resilient security system.