> For the complete documentation index, see [llms.txt](https://pingo-work.gitbook.io/pingo/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pingo-work.gitbook.io/pingo/future-blueprint/security-and-privacy.md).

# Security and Privacy

PinGo employs a multi-layered approach to security, combining advanced Web2 and Web3 technologies to protect user data and ensure a secure, reliable platform.

### Web2 - Off-Chain Security 

* NGFW (Next-Generation Firewall): Advanced firewalls providing enhanced network security through features such as deep packet inspection and intrusion prevention.
* RBAC (Role-Based Access Control): Ensures that users have access only to the information and resources necessary for their roles, minimizing security risks.
* Whitelist: A proactive measure that allows only pre-approved IP addresses or applications to access the network, reducing the risk of unauthorized access.
* AVAM (Anti-Virus and Anti-Malware): Comprehensive solutions to detect and eliminate viruses and malware, protecting the system from malicious attacks.
* Pen Testing (Penetration Testing): Simulated cyberattacks on the system to identify and fix vulnerabilities.
* DB Audit (Database Audit): Regular reviews and monitoring of database activities to ensure data integrity and security.
* Masking: Protects sensitive data by masking it during processing, ensuring that unauthorized users cannot view the actual data.

### Web3 - On-Chain Security 

* Apriio & Aqua: Tools for development and development coverage, ensuring robust and secure smart contract development and deployment.
* Cybeint: Comprehensive security solutions addressing data leakage, bait attacks, and malware, safeguarding user information and platform integrity.
* KYC Integration: Ensures that users are verified through Know Your Customer processes, reducing the risk of fraud and enhancing trust within the platform.