--- title: Security - Features description: ChaosSearch is a highly secure service, encrypting data in transit, RBAC & SSO support, and storage-based isolation directly within your S3. --- Revinate leaves their ELK stack behind to find huge gains with ChaosSearch -- Read More! [Revinate leaves their ELK stack behind to find huge gains with ChaosSearch -- Read More! ](https://www.chaossearch.io/resources/customer-stories/revinate) [![ChaosSearch](https://www.chaossearch.io/hubfs/2021%20Website/logo.svg) ](https://www.chaossearch.io/) ![Gartner Cool Vendor 2023](https://www.chaossearch.io/hubfs/C2020/Logos/Gartner%20Cool%20Vendor%202023.png) [![Start Free Trial](https://no-cache.hubspot.com/cta/default/4020721/a1eeee12-14a2-41d7-a38b-11e32980b916.png)](https://cta-redirect.hubspot.com/cta/redirect/4020721/a1eeee12-14a2-41d7-a38b-11e32980b916) # Secure by Design ## ChaosSearch provides a full set of features to keep your data safe [![See it in Action](https://no-cache.hubspot.com/cta/default/4020721/3f580d9e-4607-41e4-9b71-5d147bbb3d25.png)](https://cta-redirect.hubspot.com/cta/redirect/4020721/3f580d9e-4607-41e4-9b71-5d147bbb3d25) ChaosSearch leverages best practices and technologies to deliver a highly secure service, including encrypting data in transit, support RBAC and SSO, and using storage-based isolation directly within your cloud object storage. Before ChaosSearch, we were losing out if there was a lower priority incident and people didn't get to it till 8 or 9 days later, and all the breadcrumbs were gone. Then it was really just kind of the best guess, or the incident really wasn't resolved." Mark Hill, Director of IT Operations ![1024px-Digital_River_logo-white](https://www.chaossearch.io/hs-fs/hubfs/1024px-Digital_River_logo-white.png?width=180&name=1024px-Digital_River_logo-white.png) [![See More Customer Stories](https://no-cache.hubspot.com/cta/default/4020721/07148db0-70e2-4374-ae06-884f5d0cbc21.png)](https://cta-redirect.hubspot.com/cta/redirect/4020721/07148db0-70e2-4374-ae06-884f5d0cbc21) ![SSO](https://www.chaossearch.io/hs-fs/hubfs/C2020/Graphics/Platform/SSO.png?width=1575&name=SSO.png) ## Single Sign On (SSO) ChaosSearch supports Single Sign On (SSO) as a session and user authentication service that permits a user to use one set of login credentials (e.g., name and password) to access multiple applications. SSO can be used by enterprises, smaller organizations, and individuals to mitigate the management of various usernames and passwords. ## Role-Based Access Control (RBAC) Granular, role-based access control (RBAC) enables you to control the actions a user can perform within the ChaosSearch platform. Among other items, roles control access to functions, data, and even documents. ChaosSearch RBAC also supports multi-tenant environments, allowing multiple teams to share the environment while only being able to access their team's data and dashboards. ![RBAC](https://www.chaossearch.io/hs-fs/hubfs/C2020/Graphics/Platform/RBAC-graphic.png?width=1576&name=RBAC-graphic.png) ![Encryption](https://www.chaossearch.io/hs-fs/hubfs/C2020/Graphics/Platform/key-distro-graphics_v01_encryption.png?width=1575&name=key-distro-graphics_v01_encryption.png) ## Encryption Encryption in-transit is essential to prevent your data from being intercepted when moving between ChaosSearch and your Amazon S3. ChaosSearch supports OpenSSL and TLS 1.2, allowing you to meet stringent security and compliance requirements. ## Audit Logging With audit logging, you can record and track all the actions performed by users in your ChaosSearch environment and monitor any suspicious activity, which is essential for security incident response. Audit logging also helps you remain compliant with government and industry regulations such as GDPR, HIPAA, PCI, and ISO. ![Audit Logging Screenshot](https://www.chaossearch.io/hs-fs/hubfs/C2020/Graphics/Platform/Chaos-Audit.png?width=2089&name=Chaos-Audit.png) ![Storage-Based Isolation](https://www.chaossearch.io/hs-fs/hubfs/C2020/Graphics/Platform/Storage-Isolation.png?width=250&name=Storage-Isolation.png) ## Storage-Based Isolation ChaosSearch leverages Amazon S3 and its associated access control policy constructs to isolate customers. The ability to control visibility from the storage layer (i.e. where the data actually resides), in a central location, is the most secure and simplest mode to operate. And with S3’s advanced Identify and Access Management (IAM) functionality and roles, the combination of storage-base folder structure isolation together with an IAM’s Role Based Access Control (RBAC) overlay, delivers exceptional security. ## Additional Resources - Please visit our [security page](https://www.chaossearch.io/security) for information on our security and compliance certifications. - Read the [ChaosSearch Solution Brief](https://www.chaossearch.io/resources/solution-brief) - Read the whitepaper: [A Detailed Look at ChaosSearch](https://www.chaossearch.io/resources/detailed-look-at-chaossearch) ## Future-Proof Your Analytics at Scale [![Get a Demo](https://no-cache.hubspot.com/cta/default/4020721/0ae4b1b0-9ec0-4169-80cc-64fda5fd56db.png)](https://cta-redirect.hubspot.com/cta/redirect/4020721/0ae4b1b0-9ec0-4169-80cc-64fda5fd56db) ©2024, ChaosSearch®, Inc. [Legal](https://www.chaossearch.io/legal) Elasticsearch, Logstash, and Kibana are trademarks of Elasticsearch B.V., registered in the U.S. and in other countries. Elasticsearch B.V. and ChaosSearch®, Inc., are not affiliated. Equifax is a registered trademark of Equifax, Inc. Contact Us Phone: [(800) 216-0202](tel:+8002160202) Email: [teamchaos@chaossearch.io](mailto:teamchaos@chaossearch.io) Follow Us - - - -