Promo Center

50% off for new user

Direct Mail-46% off

Learn More

Cloud Security

Safeguard business security, application security, data security, infrastructure security, and account security with Alibaba Cloud's powerful security toolset

Safeguarding Your Cloud Security on Alibaba Cloud

Alibaba Cloud’s security compliance portfolio and services safeguard your business in China and the world throughout your cloud transformation journey

-
-
-
-
-
Account Security
IDaaS
Resource Directory
Resource Access Management
ActionTrail
Bastionhost
Business Security
-
Fraud Detection
Content Moderation
GameShield
-
Web Application Firewall (WAF)
Data Security
-
Key ManagementService
Data EncryptionService
Sensitive DataDiscovery & Protection
CertificateManagement Service
-
Edge Security Acceleration
Security Group
Cloud Firewall
Anti-DDoS
Security Center
Bastionhost
Penetration Test
Application Security
Infrastructure Security
Monitoring & Operation
Security Center
ActionTrail
-
Security Center
Managed Security Service
Cloud Config
-
Security Center
-
Security Consulting
Managed Security Service
Application Protection
Risk Control
Identity & Access
Audit
Data Protection
Network Security
Host & System Security
Configuration Check
Operation Audit
Threat Detection & Response
Vulnerability Management
Shared Responsibility

Alibaba Cloud and its customers are jointly responsible for the security of customers’ applications built on Alibaba Cloud. With security responsibilities shared between Alibaba Cloud and its customers, Alibaba Cloud provides a secure infrastructure to decrease the enterprise security burden of customers. As such, customers can configure and use cloud products in a secure manner, thus relieving much of the underlying security burdens while allowing customers to focus more on their core business needs. Learn More >

Learn more about Cloud Security solution

Contact Sales

Step 1: Assess Security Risks

-
-
ECS
RDS
ECS
RDS
Internet

Assess Security Risks

Security risk assessment is the foundation for building enterprise information systems. Systems without security assessment might contain vulnerabilities that could cause huge losses to your enterprise.

We provide these services:

  • Penetration Test

    Simulates full-scale, in-depth attacks to test your system security and proactively identify risks in your business processes

  • Security Center

    Detects ransomware, various viruses, and web tampering to protect cloud and on-premises servers, and performs compliance assessment to meet regulatory compliance requirements

  • Online Security Assessment

    Provides security consulting service with asset surveys, security baseline scanning, vulnerability scanning, personnel interviews, etc., to evaluate the current status of business system security

Step 2: Build Security Capabilities

-
-
ECS
RDS
RDS
ECS
Internet
Resource AccessManagement
ActionTrail

Configure Basic Security Settings

Basic security settings are the first step when you start to build your basic security protection capabilities. You can leverage the default capabilities of security platforms to reduce network attacks and prevent permission abuse.

We provide these services:

  • Resource Access Management

    Centrally manages identities and access to your resources using permission levels for your users, systems, and applications

  • ActionTrail

    Tracks your Alibaba Cloud account actions and records them as events to perform analysis and compliance auditing

  • Snapshot

    Allows you to create crash-consistent snapshots for all disk categories to back up or restore an entire disk for disaster recovery and data leakage tracing

-
Cloud
-
ECS
Security
ECS
RDS
RDS
Internet

Configure Basic Security Protection

Proactive measures help your enterprise defend against attacks and enhance your proactive security defense capabilities.

We provide these services:

  • Security Center

    Identifies, analyzes, and notifies you of security threats in real time using a unified security management system

  • Cloud Firewall

    Centrally manages the policies that control the traffic from the Internet to your business with visualized information

-
-
-
-
Certificate Management 
Web Application Firewall
Cloud
-
ECS
Security Center
ECS
-
Database
Bastionhost
ManagedSecurity
Internet

Enhance Security Protection

With your basic security protection in place, you can now enhance the overall security protection capabilities for your web applications and fulfill your enterprise's security compliance requirements.

We provide these services:

  • Certificate Management Service

    Ensures secure data transmission and prevents the tampering, watching, and hijacking of your data

  • Web Application Firewall (WAF)

    Provides a real-time defense to ensure the security and availability of your websites and applications

  • Bastionhost

    Manages asset O&M permissions in a centralized manner, monitors all O&M operations, and audits your O&M operations in real time

  • Managed Security Service

    Identifies vulnerabilities and improves security management of your online business systems with a fully managed security service

Step 3: Manage Business Risks

-
Internet
-
-
-
-
CertificateManagement
Cloud Firewall
Web Application Firewall (WAF)
-
ECS
Security Center
ECS
Bastionhost
Database
ManagedSecurity
Fraud Detection
Anti-DDoS
-
-
ID Verification

Manage Business Risks

Enterprises face challenges such as capital risk control, financial-grade identity verification, loan fraud prevention, marketing risk control, content security, and ticket scalping plug-ins, to name a few, and each one requires a set of corresponding prevention and control capabilities. Building security risk management capabilities for the upper level of your business guarantees the stability and availability of your systems against a large amount of complicated security threats.

We provide these services:

  • Anti-DDoS

    Intelligently defends against sophisticated DDoS attacks, reduces business loss risks, and mitigates potential security threats

  • Fraud Detection

    Identify frauds in core services, such as user registrations, operations, transactions, and credit audits, to reduce potential risks of loss

  • ID Verification

    Provides a secure, flexible, and comprehensive digital identity security solution for customers

  • Content Moderation

    Provides accurate monitoring of pictures, video, text and other multimedia content to reduce illegal or inappropriate content

  • Anti-Bot Service

    Provides a comprehensive bot defense for websites, applications, and APIs to effectively reduce the risks from specific vulnerabilities

Learn more about Cloud Security solution

Contact Sales
Enhance Your Security Posture with Alibaba Security Solutions
-
-
-
Managed Security Service
Edge Security Acceleration
-
-
-
-
-
-
DURING INCIDENT
AFTER INCIDENT
Blocking
文本
-
Preventive Measures
• Illegitimate compliance control in
• Improper configuration in infrastructure
ComplianceControl
• Suspicious events such as maliciousbehavior or administrative records
• Audit operations
-
IdentitySecurity
• Misuse of resource access control
• Improper identity control
• Block unauthorized or high-risk operations
NetworkSecurity
• Lack of network segregation and traffic
• Cyberattacks on software / OS flaws or loopholes
• Lack of security experts
• Having concerns for web acceleration and security
• Constant new intrusion attacks such as miningworms or unauthorized access
• Exhaustive website attack
• Improper log analysis report
• Lack of resources for security incidents
-
Host / ApplicationSecurity
• Virus / ransomeware attacks
• Zero-day vulnerabilities on web apps
• Vulnerability management and fixes
• Lack of security operations and data visualization
• Lack of threat management and attack
-
Data / BusinessSecurity
• Lack of key management and cryptography
• Trouble locating and classifying sensitive
• Spoofing of website ownership
• Illegal or inappropriate contents
• Online frauds
• Lack of end-to-end data monitoring and
Security Center (baseline check)
ActionTrail
Bastionhost
Bastionhost
IDaaS
Bastionhost
Cloud Firewall
Penetration Test
Cloud Firewall
Anti-DDoS
Cloud Firewall
Managed SecurityService of WAF
Security Center
Web Application Firewall
Security Center
Security
Web Application Firewall
KMS /HSM
CertificateManagementService
Data SecurityCenter
Content Moderation
Fraud Detection
Data Security Center
Cloud Config
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Auditing/Monitoring
-
-
-
-
 
Preventive Measures
-
Managed SecurityService of Anti-DDoS
-
-
BEFORE INCIDENT

Learn more about Cloud Security solution

Contact Sales

Customer Success Stories

By implementing Alibaba Cloud’s CDN and WAF services and working with Alibaba Cloud’s security professionals, AirAsia identified 90 percent of the traffic as Bots. Now, Alibaba Cloud provides Air Asia with weekly security reports and regular updates.

Founded in 1993 and headquartered in Malaysia, AirAsia is the largest airline in Malaysia and prides its self for its low-cost, high availability and superior customer service. Internationally, AirAsia is ranked as one of the world’s best low-cost airline. AirAsia operates scheduled domestic and international flights to more than 165 destinations spanning 25 countries.

Alibaba Cloud provides a comprehensive set of product portfolios ranging from IaaS, Big Data, AI, and Security to meet various use cases and needs of Tokopedia.

Tokopedia is an Indonesian technology company with a mission to democratize commerce through technology. It is the leading marketplace platform in Indonesia, empowering millions of merchants and consumers to participate in the future of commerce. Tokopedia’s vision is to build an ecosystem where everyone can start and discover anything with ease.

Partners

Learn more about Cloud Security solution

Contact Sales

Security and Compliance

We are committed to providing stable, reliable, secure, and compliant cloud computing infrastructure services across major jurisdictions around the world.
Learn More
  • CSA STAR
  • ISO 27001
  • SOC2 Type II Report
  • C5
  • MLPS 2.0
  • MTCS

Related Resources

Whitepaper

Data Security and Privacy Protection Whitepaper

This whitepaper is a complete guide covering Alibaba Cloud's systematic and comprehensive measures for data and privacy protection.

Whitepaper

Alibaba Cloud Security Whitepaper - International Edition V2.1

This whitepaper introduces the security of the Alibaba Cloud public cloud platform.

Whitepaper

The Eight Stages of Cloud-Based Data Security

This whitepaper explains how Alibaba Cloud can help you build a robust data security framework to safeguard your data assets.

Blog

Cloud Firewall Obtained IPS Certification from ICSA Labs

This short article highlights Alibaba Cloud Firewall's recent achievement from ICSA Labs.

Blog

How Can You Protect Your Business with Security Services from Alibaba Cloud?

This blog explains how our cloud-based security services can help your organization address increasingly sophisticated attacks and minimize risk.

Webinar

Protect your Business with Security Services from Alibaba Cloud

This webinar covers the key security solutions available that allow you to safely deploy your business on Alibaba Cloud.

Start with Alibaba Cloud Solutions

Learn and experience the power of Alibaba Cloud.

Contact Sales
phone Contact Us