IDC MarketScape for Hybrid Headless CMSes
Learn Why Liferay Is a Leader
Liferay DXP Cloud

Enterprise-Grade Security
For Your Mission-Critical Solutions

Liferay DXP Cloud delivers the solutions your business needs with the security and controls your users can trust. Following a robust security program with strict policies, our platform’s certification program includes ISO 27001/ 27017/ 27018, SOC 2 Type 2, HIPAA, and CSA STAR Level 2. Access our whitepaper to learn more about our Information Security Program.

How Liferay DXP Cloud Secures Data


Secure Environment Variables are encrypted on the container level to protect your most sensitive project credentials and variables.

Development Lifecycle

Streamline your development with a built-in DevOps Stack and full CI/CD strategy that enables zero-downtime deployments.

Fault Tolerance

Liferay DXP Cloud possesses advanced self-healing capabilities to ensure high availability for your applications. Additionally, health checks routinely assess the system’s overall health.


With the click of a button, backup your environment’s database and document library. Backups on DXP Cloud are encrypted at rest, using AES 256 and tested annually.


DXP Cloud has tools in place to monitor, detect, and mitigate attacks on the platform.

Disaster Recovery

In order to protect your data and prevent downtimes caused by unexpected events, DXP Cloud offers several layers of protection, including an Intra-region Disaster Recovery, optional Cross-region disaster recovery, and more.

Details About Our Operations

Vigorous Testing

Security assessment, hardening, and penetration tests on DXP Cloud are conducted annually and after major changes/releases, by third parties as well as internally by Liferay Cloud.

Access Control

Governance is incredibly important for environment management. With our Collaboration feature, allocating proper roles to your team members is effortless.

Change Control

Our team has detailed Systems Development Life Cycle (SDLC) policies and procedures to guide personnel in documenting and implementing application and infrastructure changes.

Core Security

Liferay Cloud secures its environment a using multi-layered defense approach that includes firewalls, antivirus software, and a DMZ. Additionally, VPN, SSL, and other encryption technologies are used to ensure privacy on network connections.

DXP Cloud Infrastructure

Security You Can Rely On
Click to Enlarge Click to Shrink

Learn More from Our Security Resources

Enhance Your Solution's Security with the Power of the Cloud