Why Security Matters for Links
Short links are used everywhere — in emails, documents, presentations, and customer communications. A compromised link management system can redirect thousands of users to malicious destinations. Enterprise organizations need security built into every layer.
Authentication and Access Control
Single Sign-On (SSO): Acturity supports enterprise SSO to centralize authentication:
- SAML 2.0: Integrate with Okta, Azure AD, OneLogin, and other SAML providers
- OpenID Connect: For modern identity providers
- LDAP/Active Directory: Connect directly to your existing directory service
Two-Factor Authentication (2FA): Every account supports TOTP-based 2FA with:
- Authenticator app setup (Google Authenticator, Authy, etc.)
- Backup codes for account recovery
- Trusted device registration to reduce friction for known devices
Role-Based Access Control: Acturity provides granular permission management:
- Built-in roles: Owner, Admin, Member, and Viewer
- Custom roles (Enterprise): Define exactly which permissions each role has
- Privilege escalation prevention: Non-admin users cannot grant themselves or others system-level permissions
Data Encryption
Security at the data level is non-negotiable:
- AES-256-GCM encryption for stored credentials and sensitive data
- bcrypt password hashing with proper salt rounds
- JWT hardened verification for all API authentication
Link-Level Security
Individual links can be protected with multiple security layers:
- Password protection: Require a password before redirecting (Professional+)
- Link expiration: Set an automatic expiration date after which the link stops working
- Click limits: Cap the number of times a link can be clicked, with configurable reset periods
- Custom domains with DNS verification: CNAME and TXT record verification ensures domain ownership
Audit and Compliance
Comprehensive Audit Logging: Acturity logs user actions with full context:
- Who performed the action (user ID and email)
- What action was taken
- When it happened (timestamp)
- Where it originated (IP address)
- Severity level classification for quick filtering
Rate Limiting and Bot Detection: Automated protections prevent abuse:
- Rate limiting on all API endpoints
- Bot detection to filter artificial traffic from analytics
- CSRF protection on all state-changing operations
Building a Security-First Link Strategy
- Enable SSO to centralize authentication and enforce your organization's password policies
- Require 2FA for all team members, especially those with admin access
- Use role-based access to limit who can create, edit, and delete links
- Set default expiration policies for links that contain sensitive content
- Review audit logs regularly to catch unusual activity early
- Use custom domains to maintain brand trust and prevent phishing confusion
Getting Started with Acturity
Acturity's Enterprise plan includes SSO, custom roles, and extended audit logging. Start by connecting your identity provider, setting up roles for your team, and configuring default link security policies. Contact our team for a guided setup.
