Security on Netdata

Secrets Management: Remove Credentials From Configs

Mon, 20 Apr 2026 00:00:00 +0000

If you’re running Netdata collectors that connect to databases, APIs, or other authenticated services, there’s a good chance you have passwords sitting in plain-text configuration files right now. It works, but it’s the kind of thing that makes security teams nervous and makes credential rotation painful. Every password change means editing config files and restarting collectors.

Netdata now supports secrets management natively. Instead of putting credentials directly in your collector configurations, you reference them using a resolver syntax, and Netdata resolves the actual values at runtime from whatever source you choose: environment variables, files on disk, the output of a command, or a centralized secret store like HashiCorp Vault or AWS Secrets Manager.

Access Control: Secure Observability Without Risk

Thu, 18 Dec 2025 00:00:00 +0000

Secure your observability infrastructure with Netdata’s edge-native access control: granular RBAC, automated SSO provisioning, true multi-tenancy through Spaces and Rooms, comprehensive audit logging, and SOC 2 Type 2 certification - all while keeping your data on your infrastructure.

Data Sovereignty With Metadata-Only Cloud

Thu, 18 Dec 2025 00:00:00 +0000

Netdata delivers complete observability while keeping every metric and log exactly where you need it: on your infrastructure, in your jurisdiction, under your control. Meet GDPR, NIS2, DORA, and HIPAA requirements through architecture, not configuration.

SOC 2 Type 2: Validated Security Controls Over Time

Thu, 16 Oct 2025 00:00:00 +0000

We’re excited to share that Netdata has successfully achieved SOC 2 Type 2 attestation.

Following a five-month audit conducted by Sensiba LLP, we can now confirm that our security controls work consistently in practice. The audit covered the period from April 1 to August 31, 2025, and tested whether our controls operated effectively throughout that entire timeframe.

Back in April, we announced our SOC 2 Type 1 attestation, which validated that our security controls were properly designed at a specific point in time. We also mentioned we were entering the monitoring period for Type 2. Today we can share the results.

SOC 2 Type 1: Committed To Security & Trust

Fri, 16 May 2025 00:00:00 +0000

We are pleased to announce that Netdata has successfully achieved SOC 2 Type 1 attestation!

Following an independent examination performed by AssuranceLab CPAs LLC, the report confirms that—as of April 25, 2025—the design of Netdata’s controls meets the Security, Availability, and Confidentiality Trust Services Criteria defined by the AICPA.

At Netdata, the security and integrity of the monitoring data our users entrust to us are paramount. This significant milestone, validated through a rigorous, independent third-party audit conducted by AssuranceLab, formally attests to the robustness of our security controls and practices as designed and implemented at a specific point in time.

Improve Your Security With systemd-journal & Netdata

Tue, 24 Oct 2023 00:00:00 +0000

systemd journals play a crucial role in the Linux system ecosystem, and understanding the importance of the logs contained within is essential for both system administrators and developers.

For those unfamiliar, systemd is an init system employed by Linux distributions, initiates the user space and oversees all ensuing processes. One of its key components, systemd journal, assumes a central role in logging system activities and messages, delivering a host of benefits to both system administrators, developers and cyber security engineers. The systemd journal functions as a logging system that gathers, archives, and oversees log messages and event data originating from a diverse array of system components, encompassing the kernel, system services, applications, and user activities.

Entropy In Cryptography: Key To Security & Randomness

Wed, 03 May 2023 00:00:00 +0000

Entropy is a measure of the randomness or unpredictability of data. In the context of cryptography, entropy is used to generate random numbers or keys that are essential for secure communication and encryption. Without a good source of entropy, cryptographic protocols can become vulnerable to attacks that exploit the predictability of the generated keys.

What is Entropy?

In most operating systems, entropy is generated by collecting random events from various sources, such as hardware interrupts, mouse movements, keyboard presses, and disk activity. These events are fed into a pool of entropy, which is then used to generate random numbers when needed.