DRIVE

Secure. Simple. Cost-Effective.

OVERVIEW

OneOffice was designed & built to offer best-in-class security features. Our security parameters far exceed industry standards as well as the nearest competitor

As a monolithic system we minimize attack vectors (by reducing reliance on third-party software with their own vulnerabilities and eliminating integration risks)

The heavy-lifting is done via our own framework in C/C++, so no reliance on “hacky” scripted-frameworks

“It’s easy to make things complicated –

its hard to make them simple –

that’s what we do…”

Ramez Rafla Founder of OneOffice

Exclusive Features

File Sharing

Sharing Permissions Per Share (not per file)

Collaboration

Live Collaborate, Chat, Share and Comment on files (with version control)

Activity Monitor

Full Activity Audit Trail

SECURITY FEATURES

Single Point of Entry
OneOffice includes its own web server with SSL termination

The application acts as a firewall, preventing unauthorized access

All services (DB, Redis, storage, document editor etc.) sit BEHIND the application server in a private network

Strong session controls at the access-level that prevent any further actions until user permissions are validated
Intrusion Detection
Host Intrusion Detection We monitor all activities to detect anomalies in user behavior and block malicious attempts system-wide

Protocol-Based Intrusion Detection HTTP / HTTPS / IMAP / SMTP / Websocket servers are built-in and disconnect on any attempts to alter protocol behavior. We do not honor SSL requests from older encryption technologies

Anomaly-Based Intrusion Detection The typical patterns of behavior are well-known in advance. Any deviation is given a score, above which attempt is logged and the session is terminated
Intrusion Prevention
Strong Session Controls Each user’s session is linked to device / IP and cannot be hacked by third party

XSS – Cross-site Scripting By design, our system is not vulnerable, as our applications are Websocket / REST – based which only query data (no HTML generation)

SQL Injection Our queries are prepared & compiled during startup time preventing any attempt to alter or access the database

Password Flood Controls All access protocols (HTTPS / IMAP / SMTP) share ‘flooding’ database system-wide.

Live list of Malicious IP / Domains We download from multiple services the most up to date lists of malicious actors

Malware / Viruses User apps never run on server, all uploads are scanned. Our code is compiled on safe clean machines

Long hashes & high entropy We use long alphanumeric random strings with very high entropy, negating “birthday attacks”
Separate Instance
Each organization gets its own instance of OneOffice

Separate database

Separate file storage

Talk chats & video calls routed through your server

All notifications through your instance

Customized security rules (e.g. password length, MFA etc.)

Each customer has a different Web SSL certificate

MS 365 & Google Workspace use shared database & file storage. A vulnerability / hack exposes all its tenants to attacks.
End-to-end Encryption
End-to-end (E2E) encryption (e.g. WhatsApp, Signal) is the most secure encryption, secret keys on your device, not on server.

All Talk chats

All Talk audio / video calls

All web & push notifications

MS Teams & Google Meet are NOT E2E encrypted, exposing your calls to server administrators & malicious actors
Ransomware / Data-loss Protection
All servers are protected by strong key-based & IP authentication

HuaweiCloud provides additional strong protections and MFA

Historical versions of all files are kept as backup, so you can quickly revert any data loss

Built-in auditing tools allow you to track unauthorized access

Fine-tuned sharing rules

Only the highest-end MS 365 package comes with some auditing tools (but no file versioning!)
Strong Sharing Protection
Internal and External shares controlled by administrators

Admins can fine-tune external share rules (e.g. password protection, duration, groups, access type, target audience etc.)

Automated video call for verification during file access

Multiple shares for same files with different permissions

Version history is kept for all changes (even by external actors)

MS 365 and Google Workspace do not allow you to customize your sharing rules or to have multiple share permissions for the same file
Server-side File Editing
Online document (Word, PPT, Excel, Visio) editor is server-side

Streaming engine sends a “view” of the file, not its content

Uses same technology as streaming games

Blocks all downloads

Real-time collaboration is server-controlled avoiding conflicts

MS 365 and Google Docs send the file to your browser for editing, allowing users to get a copy (even if you disable downloads)
Security Controls
All communication is encrypted

Enforced password policy (length, history, life-cycle, login attempts, common passwords, checking for breached passwords etc.)

Brute-force protection

Rate-limiting

Content Security Policy (block XSS etc.)

Same-site cookies only

Machine-learning suspicious login detection

IP blocks / whitelists (e.g. only allow access from company IP)

Multi-factor authentication (OneOffice Auth or any secure MFA App)
Activity & Event Logs
All user activity are logged

Your / employee file shares

All file modifications

All communication between your employees & externally

New or deleted files

Download of files

New comments or tags

Calendar invitations

Incoming calls or chat requests
Email Security
DKIM / ARC signatures

Spam / Phishing detection using leading-edge AI filters

Email quarantine system

Industry IP block lists

Anti-virus using most advanced commercial virus signatures

Ability to block by domain / IP

Executable (.exe / .pkg) blocking

Malicious HTML filtering

In-page JavaScript removal

Macro-scanning in MS-Office documents

Catapult your digital office!

It’s only 10mins away.

View Pricing

Get Started