Security Policy

RiskServers offers different levels of security tailored to your needs:

RiskServers employs the following security schemes to protect the integrity of your information:
  • Your System Profile available at http://www.riskservers.com is only accessible with the correct user name and encrypted password.(See Below)
  • Additional Encryption mechanisms are available upon request.
  • An encrypted Digital ID is stored on the registered system and is used to authenticate each transaction between RiskServers or the Risksvr™ engine and your client system.
  • Any suspect activitiy triggers automatic tracing and logging.
  • All data transfer between RiskServers and the Risksvr™ Risk Engine is encrypted and  across private, non-advertised networks.
  • All transactions can be encrypted using a Secure Sockets Layer (SSL) connections.(See Below)

RiskServers takes security of customer information and system security very seriously. Please report any instances of security vulnerability or breach with any  product or service to  security@ REMOVE-ME riskservers.com .

By default, RiskServers  on non-unix platforms offers a reasonably secure mechanisms that encrypt your password before it is even sent over the network.

This means that when you logon to riskservers.com or risksvr.com with Netscape (c) or Internet Explorer (c) the password is sent encrypted. Anyone monitoring your session(s) would not see the password you have typed in.

Unfortunately, this mechanism does not work on some versions of Netscape that run on Unix/Linux platforms.
Indeed, Netscape on Unix/Linux will send a form as it is typed by the user, even if the field is blanked or overwritten afterwards!

If you are a Unix or Linux user or If you need to ensure much higher security levels to protect  your portfolio or the portfolio of your customers, positions and analysis remain completely confidential we recommend that you use SSL. 

https://www.risksvr.com

Please bear in mind that the engine might run slower due to the SLL overhead!

You can access the SSL site by clicking on the padlock on the main login form.

Once you have logged on to RiskSvr.com a cookie will be sent to your browser. The cookie contains encrypted information.
For your own personal security, please note that any tampering with the cookie automatically triggers a series of measures in order to trace the illegitimate user.The same holds true upon failed login sessions.

Note: The site is open to the general public with no access level and user rights by selecting the guest account or typing username:
guest password:guest. 
A guest cannot save positions, runs or any other personal data, but he can get a feel of how the system works!

The Selection of the Guest account requires no exchange of private information.