Relay Security
Relay by Stantia Labs: Enterprise-grade security with zero-trust architecture, military-grade encryption, and absolute privacy at 2 billion packets per second.
Security Features
🔒Data Protection
- ✓AES-256 encryption for data at rest
- ✓TLS 1.3 and DTLS 1.3 encryption for data in transit
- ✓Hardware Security Module (HSM) key management
- ✓Field-level encryption for sensitive data
- ✓Automatic key rotation and management
🔐Transport Security
- ✓TLS 1.3 with full handshake, record layer, cipher suite and certificate validation (RFC 8446)
- ✓Certificate revocation checked through OCSP and CRL
- ✓DTLS 1.3 with anti-replay protection for datagram transports (RFC 9147)
- ✓WSS and QUIC encryption built on the same in-house TLS 1.3 core
- ✓Mutual TLS (mTLS) for device and service identity
Known limitation: CoAP over DTLS
The CoAP/DTLS transport is only partially implemented — application payloads are not yet encrypted. Do not use it where confidentiality is required. Every other transport encrypts application data.
🔑Access Control
- ✓Role-based access control (RBAC)
- ✓Multi-factor authentication (MFA)
- ✓Single Sign-On (SSO) with SAML 2.0
- ✓OAuth 2.0 and OpenID Connect support
- ✓API key management and rotation
- ✓IP whitelisting and rate limiting
🌐Network Security
- ✓DDoS protection with Anycast routing
- ✓Web Application Firewall (WAF)
- ✓Intrusion Detection and Prevention Systems (IDS/IPS)
- ✓VPC isolation and network segmentation
- ✓Zero-trust network access model
🏭OT & Industrial Compliance
- ✓Architecture aligned with IEC 62443 zones and conduits for industrial automation and control systems
- ✓Deployment model supports NERC CIP requirements for bulk electric system operators
- ✓Runs entirely inside your OT network — no standing cloud credentials, no outbound dependency
- ✓Air-gapped and offline-licensed operation for isolated control networks
- ✓Diagnostic access is break-glass only: customer-initiated, time-boxed, revoked automatically
🚨Incident Response
- ✓24/7 Security Operations Center (SOC)
- ✓Real-time threat detection and monitoring
- ✓Incident response plan with 1-hour notification SLA
- ✓Post-incident forensic analysis
- ✓Security vulnerability disclosure program
👥Employee & Operational Security
- ✓Background checks for all employees
- ✓Security training and awareness programs
- ✓Principle of least privilege access
- ✓Segregation of duties
- ✓Regular security code reviews
- ✓Disaster recovery and business continuity planning
Security Vulnerability Disclosure
We take security seriously. If you discover a security vulnerability, please responsibly disclose it to our security team.
Report Security IssuePlease do not publicly disclose vulnerabilities until we have had time to address them.
Trust the Security Experts
Enterprise customers worldwide trust Stantia Labs to protect their most sensitive data with bank-grade security.