ZKTeco is proud to announce that its ZKBio CVSecurity software, ZKBio Time software, and the ZKBio Time mobile application have all received the esteemed Safe to Host Certification from Indusface, a leader in application security. This certification highlights ZKTeco's commitment to delivering secure, reliable, and user-friendly security solutions.
Advanced Cybersecurity Measures with ZKTeco
ZKBio CVSecurity
ZKBio CVSecurity is a comprehensive web-based security platform that integrates hybrid biometric and computer vision technologies. This platform encompasses various modules, including personnel management, time and attendance, access control, visitor management, and intelligent video management. To ensure robust protection against threats, the platform is fortified with advanced cybersecurity measures. It features real-time threat detection, which provides continuous monitoring for vulnerabilities and potential threats. Additionally, data encryption secures the transmission of sensitive information, while user access control implements granular permissions to ensure that only authorized personnel can access critical features.
ZKBio Time
ZKBio Time serves as a powerful web-based time and attendance management solution that connects seamlessly with ZKTeco’s standalone devices. This solution operates as a private cloud, offering mobile and web access for employee self-service. ZKBio Time employs stringent cybersecurity protocols, including secure API communication to protect data exchanged between devices and servers. Multi-factor authentication adds an extra layer of security for user logins, and the application adheres to international standards such as ISO/IEC 27001:2013 and ISO/IEC 27701:2019 for information security management.
ZKBio Time Mobile Applications
The ZKBio Time mobile application significantly enhances the functionality of ZKBio Time by allowing employees to manage their attendance and requests on-the-go. This mobile app enables real-time clock-in and clock-out, allowing employees to easily record their attendance with location verification. Users can submit leave requests and view approvals directly from their mobile devices, ensuring efficient management of attendance. The application also delivers push notifications to keep users updated with announcements and important notifications from management, all while supporting multiple languages to ensure accessibility for diverse workforces.
Highlights of Safe to Host Certifications from Indusface
Safe to Host Certification for ZKBio CVSecurity and ZKBio Time
The Safe to Host Certifications from Indusface validate that ZKTeco’s applications are free from severe vulnerabilities and threats. This certification process involved rigorous auditing methodologies that assessed the applications against the OWASP Top 10 and other comprehensive security frameworks. For ZKBio CVSecurity, the assessment utilized tools such as Burp Suite Professional, Nmap, and various OSINT tools, which are essential for identifying vulnerabilities in web applications.
Safe to Host Certification for ZKBio Time Mobile App
The security evaluation of the ZKBio Time mobile application (including ZKBioTime V (2.0.16) and ZKBioTime V (2.0.19)) involved specialized testing tools tailored for mobile environments. Tools like Frida, Objection, and APK Tool were employed to perform dynamic and static analysis, ensuring thorough scrutiny of the application’s security posture. These tools are specifically designed for mobile applications, allowing for in-depth assessments of vulnerabilities unique to such environments.
Both applications have successfully passed evaluations for critical, high, medium, and low vulnerabilities, showcasing ZKTeco's commitment to maintaining high cybersecurity standards. Indusface’s comprehensive testing ensures that ZKTeco's solutions not only meet industry benchmarks but also provide peace of mind for users regarding their data security.
Commitment to Excellence
“Receiving the Safe to Host Certifications is a significant milestone that underscores our commitment to cybersecurity,” said Jeff Yang, Product Director at ZKTeco. “We strive to empower organizations with innovative solutions that not only enhance security but also prioritize user trust and safety.” With ongoing investments in technology and security, ZKTeco is dedicated to providing top-tier solutions that meet the evolving needs of its clients.
