Security on mutual hosting

[Mickey3d]

Hello there

I have some questions about the SuiteCRM’s security, and how to level up this data, especially since the contacts and others can be very valuables.

Like many others companies, mine is having this CRM on a mutual hosting provider.

1. What kind of securities is having SuiteCRM ?

2. How can I improve these securities on a mutual hosting ?

Greeting,

[Will]

Ensure CRM permissions are correct/restrictive and are not 777 on all files/dirs
Look into LDAP or Two step authentication methods for logging in.
Ensure the domain is SSL enabled for encrypted data traffic/transfer.

[Mickey3d]

@Will

Ensure CRM permissions are correct/restrictive and are not 777 on all files/dirs

Hello Will,
Thanks for your feedback.
So I did use the CRM permissions as described on the SuiteCRM manual.

Look into LDAP or Two step authentication methods for logging in.

I don’t have a LDAP server on this mutual hosting.
About the 2 steps auth, do you know where I can read more informations for SuiteCRM ?

Ensure the domain is SSL enabled for encrypted data traffic/transfer.

For this point, I don’t have a SSL certificate.
I think the best way will be to buy one, nope ?

Thanks again