Security First

Enterprise-Grade Security for Real-Time

Secure your MQTT connections with encryption, topic-level permissions, and multiple auth providers.

Security Built Into Every Layer

From transport encryption to fine-grained access control, CloudSignal protects your data at every step.

Enterprise-Grade WSS Security

Bank-level TLS 1.3 encryption for all WebSocket connections. Your real-time data is protected with the same security standards used by financial institutions.

Visual ACL Editor

Design access control rules with our intuitive visual editor. Define who can publish or subscribe to topics without writing code.

Comprehensive Audit Logs

Track every connection, publish, subscribe, and administrative action. Full visibility into your messaging infrastructure for compliance and debugging.

Organization Isolation

Complete data separation between tenants. Each organization operates in its own isolated namespace with dedicated credentials and access controls.

Multiple Auth Providers

Native Supabase Auth integration, token-based authentication, API keys, JWT validation, and OAuth/OIDC. Backend WSS auth for server-to-server communication.

Data Protection

Messages encrypted in transit. Optional message persistence with encryption at rest. Automatic data retention policies.

Access Control

Visual ACL Editor

Design your access control rules visually. No configuration files, no command-line tools. just a simple interface to define who can access what.

Topic Patterns
Use wildcards (+, #) to create flexible rules that match multiple topics
Per-User Rules
Assign different permissions to individual users or groups
Publish/Subscribe Control
Separate rules for reading (subscribe) and writing (publish)
Real-Time Updates
ACL changes apply immediately without disconnecting clients
ACL Rules
devices/+/status
User: adminβœ“ Publishβœ“ Subscribe
sensors/#
User: viewerβœ— Publishβœ“ Subscribe
commands/device-*
User: controllerβœ“ Publishβœ— Subscribe
Enterprise

Advanced Security for Enterprise

Additional security features and compliance certifications for organizations with advanced requirements.

Bring Your Own Auth (BYOA)

Integrate your existing identity provider. Support for SAML, OIDC, and custom authentication webhooks for seamless SSO.

Private Endpoints

Dedicated infrastructure with private network connectivity. VPC peering and private link support for enterprise deployments.

Custom Retention Policies

Define custom data retention periods to meet your compliance requirements. Automatic purging and archival options.

Dedicated Infrastructure

Single-tenant deployments with dedicated compute and storage. Custom scaling and performance guarantees.

Security You Can Trust

Built on VerneMQ, the battle-tested MQTT broker trusted by Fortune 500 companies for mission-critical IoT deployments.

99.9%
Uptime SLA
TLS 1.3
Encryption
24/7
Monitoring
<100ms
Latency

Ready for Secure Real-Time?

Start with our free tier or contact us for enterprise security requirements.

Questions about security? [email protected]