Web Application Firewall
Our website and all of our applications sit behind web application firewalls that block the latest threats.
Security
Security is one of our core values.
Whether we are managing our internal operations or working for our clients, we take a security-first approach. We implement robust security protocols and continuously enhance our measures to stay ahead of emerging threats — so we earn, and keep, the trust of our partners and clients, safeguarding their data and interests at all times.
01
Application security
Protection in front of every website and application we run.
DDoS protection
Our applications are protected by multi-level DDoS mitigation and blocking.
Encryption
All of our web servers require an encrypted connection and are tested continuously with Qualys SSL Labs, to keep the highest overall rating: A or A+.
02
Infrastructure
Enterprise-grade foundations, with defence in depth from the endpoint to the network edge.
Enterprise-grade providers
Our applications are backed by the largest cloud service providers: Microsoft Azure and Amazon Web Services.
Endpoint security
Endpoint security on our devices detects and mitigates malicious activity.
Zero-Trust Network Access
Access to our systems is granted per user, per device and per application — never by network location alone.
Next-generation firewalls
Next-generation firewalls with advanced IPS/IDS and deep packet inspection (DPI).
URL filtering and malware prevention
Malicious and unwanted destinations are filtered, and malware is stopped before it reaches a device.
Backups
Scheduled, encrypted backups, kept in more than one location.
03
Code security
All code we write — for our own solutions or for any of our clients — continuously goes through Static Application Security Testing (SAST). It helps us find and fix security issues early, and prove compliance with internationally recognised security standards.
- Security standards
- CWE, OWASP, CERT, PCI DSS, DISA STIG, NIST SSDF and ISO/IEC TS 17961.
- Vulnerability detection
- SQL injection, tainted data, buffer overflow, vulnerable coding practices, and many more.
- Bugs, quality issues and code smells
- Null pointer dereferences and exceptions, memory and resource leaks, uncaught exceptions, and many more.
04
Compliance
We are strongly dedicated to privacy and compliance. We follow the leading industry standards and regulations — GDPR, HIPAA, ISO 27001, CCPA and NIST 800 — and continuously work to maintain and improve these standards.
- GDPR compliant
- California Consumer Privacy Act (CCPA) compliant
- HIPAA compliant
- ISO 27001 compliant
Privacy by design
Data minimisation, clear purposes, retention and the right to erasure — designed into the data model, not added after launch.
Cyber resilience
In force in Hungary since 2025. Secure development, supply-chain security and incident readiness for organisations in scope.
Accessibility
Since 28 June 2025 the European Accessibility Act covers many digital services. We design and test for WCAG 2.2 AA.
Trustworthy AI
Risk classification, human oversight and transparency planned in from the start of every AI project.
05
Reporting a vulnerability
Found a security issue?
If you believe you have found a vulnerability in one of our websites or applications, please email info@1one.hu with the subject "Security report" and enough detail for us to reproduce it. We will confirm we received it, keep you informed while we fix it, and ask that you give us reasonable time before disclosing it publicly. Our contact details are also published in security.txt.
Want the same standard for your systems?
Cybersecurity solutions from cutting-edge providers, with expert implementation — and secure software, built from the first commit.