Security at NetraOps
Security companies trust NetraOps with their operations, their people, and their clients' sites. We take that seriously. Here is how the platform protects your data.
Your data stays yours
NetraOps is built for multiple security companies operating side by side, and the platform is designed so they never see each other. Every record — every guard, shift, site, report, and photo — is scoped to your organization, and that boundary is enforced at the API layer on every single request. Requests cannot cross that boundary.
Sign-in you can rely on
Sessions use signed tokens that the server can revoke at any time — signing out means signed out. Accounts are protected against password guessing with automatic lockout and cooldown after repeated failed attempts, and password requirements are enforced when credentials are created or changed.
The right access for the right role
Admins, guards, and clients each get their own portal with their own permissions. Guards can act only on their own assigned shifts and sites — never anyone else's. Clients see the reporting their contract covers, nothing more. Role checks happen on the server, not in the app.
Encrypted in transit
All traffic between the mobile app, the web portals, and our servers is encrypted with TLS. There are no unencrypted paths into the platform.
Private media storage
Incident photos, verification photos, and generated PDFs are stored in private cloud storage buckets that are not publicly accessible. Files are served only through short-lived, signed links generated for authorized users — links expire quickly and cannot be reused indefinitely.
Location data that can't be faked
Geofence compliance is verified on our servers, not on the phone. The platform independently checks every clock-in and location ping against the site's boundary — a modified app or spoofed request can't simply claim to be on post.
Monitored around the clock
The platform runs with industry-standard error monitoring and alerting, so problems are surfaced to our team quickly.
Built on trusted infrastructure
NetraOps runs on managed cloud infrastructure — Vercel, Railway, and AWS — with encrypted storage and the operational security practices of those platforms behind it.
Responsible disclosure
Found something that doesn't look right? We want to hear about it. Report security concerns to support@netraops.com and we'll investigate promptly.