How secure is Bitrix24?

Question

Information Security

How safe are these kinds of solutions? After all, there is a sure thing, important data documents will skip in the tasks, this is not ok, after all. Or how to use it correctly?

Answer 1

Our pentesters sluggishly kicked it - drove it away with automatic vulnerability analyzers. With a run, it did not break, so you can use it relatively calmly.
Another question is that this is a complex combine, and if it is more or less on our website and with our composition of modules (this is not an online store, if anything), then problems can arise very easily with another set of modules. In general, security is not some result that you can achieve and relax, security is a process :-) This is true not only for Bitrix.
If you are really worried about safety, organize your workflow properly. Timely updates, periodic service and perimeter audits, etc.
P/S/: https://www.1c-bitrix.ru/products/cms/security/aud...
Allegedly, Positive Technologies regularly audits the application.

Answer 2

That's right, update more often, check the data entered into the database when requested, access to the admin panel only from trusted networks \ addresses, standard set))