ProxyMesh Security

What information do you need right now? Click on applicable links below.

ProxyMesh uses security measures on all levels of the system to protect your data. Our security tools include encryption, firewalls, and access controls.  In this way, every transaction, signup, and login is checked as to its potential for fraud. If they appear too risky, they are blocked.

User IP addresses can be blocked for too many failed logins, too many declined transactions, or other behavior that looks like fraud or cyberattack. On individual proxies, users can be blocked for too many failed login attempts.

We store information you provide to us on a computer system located in a controlled facility with limited access. Employees view your data only on a need-to-know basis.

Privacy Policy

ProxyMesh respects your privacy, and we are committed to maintaining the privacy and confidentiality of personal data we collect. 

Please visit our website and review the Privacy Policy describing the ways we collect information from and about you, and what we do with the information, so that you may decide whether or not to provide information to us.

Website Security

Firewalls

The website is protected by a web application firewall (WAF), and the proxy servers automatically block IP addresses that repeatedly fail to authenticate.

HTTPS

Login and account pages can only be accessed over HTTPS. Eavesdroppers are prevented from extracting your password, and your data is always protected in transit.

Account Security

Two-Factor Authentication

With two-factor authentication (2FA) turned on, logging in requires your password and a one-time code from an authenticator app, so your account stays protected even if someone gets your password. Codes are never sent by text message.

Password Management

1Password offers apps and 2FA for a range of devices, and it's usable with the major browsers and operating systems.

Hashed Passwords

All passwords are salted and hashed using a secure hashing algorithm, so that your password cannot be read by anyone else. These measures provide a strong defense against brute-force attacks and ensures that no ProxyMesh employee can read your password.

Brute-Force Login Protection

Both for the website and for the proxy servers, if someone tries to log into your account too many times in a row, failing each time, then their IP is automatically blocked for several hours.

Billing Information & Payment Security

We store only your name, email address and any optional extra billing lines you add for invoices. All other billing and payment details are held by PCI DSS-compliant payment processors, which also screen payments for fraud.

Proxy Security

Authentication

Unlike an open proxy, the ProxyMesh proxies can only be accessed by authenticated users. For the highest level of security, we recommend IP authentication (described in Proxy Authentication) so that your account credentials are never transmitted over the network.

On paid plans, bearer tokens let you authenticate scripts and API clients without embedding your account password. Create separate tokens per application and revoke individual tokens when no longer needed.

Sub-Accounts

The higher level plans support sub-accounts, usable as an alternative to your main account. If you are using username:password authentication or bearer tokens, then using a sub-account can be a way to protect your main account credentials. 

Data Security

Servers directly under control of the ProxyMesh system employ standard protocols to protect the security of data in transit.

ProxyMesh does not store request bodies, and only stores request logs to monitor the performance and functionality of the proxy servers, and to bill your account based on usage. These logs are kept for no longer than 30 days, and are only accessible by authorized support staff.

HTTPS CONNECT Method

Using the HTTP CONNECT   method, the servers can securely proxy HTTPS/SSL connections between you and an HTTPS server.

All communication between your client/browser and the secure site is encrypted; the proxy server's function is limited to moving the data back and forth, and does not even detect what method of request you are using. Most HTTP client libraries support the CONNECT   method for HTTPS requests over HTTP proxies.

Open Proxy

Access to the ProxyMesh Open Proxy server is included free with every ProxyMesh account. Our proxy server can forward your requests to a list of known open proxies.

Be aware that, because ProxyMesh does not control the open proxies, someone running an open proxy could potentially "snoop" on your data.

World Proxy