Cloud Security

Safeguard business security, application security, data security, infrastructure security, and account security with Alibaba Cloud's powerful security toolset

Safeguarding Your Cloud Security on Alibaba Cloud

Alibaba Cloud’s security compliance portfolio and services safeguard your business in China and the world throughout your cloud transformation journey

Shared Responsibility

Alibaba Cloud and its customers are jointly responsible for the security of customers’ applications built on Alibaba Cloud. With security responsibilities shared between Alibaba Cloud and its customers, Alibaba Cloud provides a secure infrastructure to decrease the enterprise security burden of customers. As such, customers can configure and use cloud products in a secure manner, thus relieving much of the underlying security burdens while allowing customers to focus more on their core business needs. Learn More >

Learn more about Cloud Security solution

Contact Sales

Step 1: Assess Security Risks

Assess Security Risks

Security risk assessment is the foundation for building enterprise information systems. Systems without security assessment might contain vulnerabilities that could cause huge losses to your enterprise.

We provide these services:

  • Penetration Test

    Simulates full-scale, in-depth attacks to test your system security and proactively identify risks in your business processes

  • Security Center

    Detects ransomware, various viruses, and web tampering to protect cloud and on-premises servers, and performs compliance assessment to meet regulatory compliance requirements

  • Online Security Assessment

    Provides security consulting service with asset surveys, security baseline scanning, vulnerability scanning, personnel interviews, etc., to evaluate the current status of business system security

Step 2: Build Security Capabilities

Configure Basic Security Settings

Basic security settings are the first step when you start to build your basic security protection capabilities. You can leverage the default capabilities of security platforms to reduce network attacks and prevent permission abuse.

We provide these services:

  • Resource Access Management

    Centrally manages identities and access to your resources using permission levels for your users, systems, and applications

  • ActionTrail

    Tracks your Alibaba Cloud account actions and records them as events to perform analysis and compliance auditing

  • Snapshot

    Allows you to create crash-consistent snapshots for all disk categories to back up or restore an entire disk for disaster recovery and data leakage tracing

Configure Basic Security Protection

Proactive measures help your enterprise defend against attacks and enhance your proactive security defense capabilities.

We provide these services:

  • Security Center

    Identifies, analyzes, and notifies you of security threats in real time using a unified security management system

  • Cloud Firewall

    Centrally manages the policies that control the traffic from the Internet to your business with visualized information

Enhance Security Protection

With your basic security protection in place, you can now enhance the overall security protection capabilities for your web applications and fulfill your enterprise's security compliance requirements.

We provide these services:

  • Certificate Management Service

    Ensures secure data transmission and prevents the tampering, watching, and hijacking of your data

  • Web Application Firewall (WAF)

    Provides a real-time defense to ensure the security and availability of your websites and applications

  • Bastionhost

    Manages asset O&M permissions in a centralized manner, monitors all O&M operations, and audits your O&M operations in real time

  • Managed Security Service

    Identifies vulnerabilities and improves security management of your online business systems with a fully managed security service

Step 3: Manage Business Risks

Manage Business Risks

Enterprises face challenges such as capital risk control, financial-grade identity verification, loan fraud prevention, marketing risk control, content security, and ticket scalping plug-ins, to name a few, and each one requires a set of corresponding prevention and control capabilities. Building security risk management capabilities for the upper level of your business guarantees the stability and availability of your systems against a large amount of complicated security threats.

We provide these services:

  • Anti-DDoS

    Intelligently defends against sophisticated DDoS attacks, reduces business loss risks, and mitigates potential security threats

  • Fraud Detection

    Identify frauds in core services, such as user registrations, operations, transactions, and credit audits, to reduce potential risks of loss

  • ID Verification

    Provides a secure, flexible, and comprehensive digital identity security solution for customers

  • Content Moderation

    Provides accurate monitoring of pictures, video, text and other multimedia content to reduce illegal or inappropriate content

  • Anti-Bot Service

    Provides a comprehensive bot defense for websites, applications, and APIs to effectively reduce the risks from specific vulnerabilities

Learn more about Cloud Security solution

Contact Sales
Enhance Your Security Posture with Alibaba Security Solutions

Learn more about Cloud Security solution

Contact Sales

Customer Success Stories

By implementing Alibaba Cloud’s CDN and WAF services and working with Alibaba Cloud’s security professionals, AirAsia identified 90 percent of the traffic as Bots. Now, Alibaba Cloud provides Air Asia with weekly security reports and regular updates.

Founded in 1993 and headquartered in Malaysia, AirAsia is the largest airline in Malaysia and prides its self for its low-cost, high availability and superior customer service. Internationally, AirAsia is ranked as one of the world’s best low-cost airline. AirAsia operates scheduled domestic and international flights to more than 165 destinations spanning 25 countries.

Alibaba Cloud provides a comprehensive set of product portfolios ranging from IaaS, Big Data, AI, and Security to meet various use cases and needs of Tokopedia.

Tokopedia is an Indonesian technology company with a mission to democratize commerce through technology. It is the leading marketplace platform in Indonesia, empowering millions of merchants and consumers to participate in the future of commerce. Tokopedia’s vision is to build an ecosystem where everyone can start and discover anything with ease.


Learn more about Cloud Security solution

Contact Sales

Security and Compliance

We are committed to providing stable, reliable, secure, and compliant cloud computing infrastructure services across major jurisdictions around the world.
Learn More
  • ISO 27001
  • SOC2 Type II Report
  • C5
  • MLPS 2.0
  • MTCS

Related Resources


Data Security and Privacy Protection Whitepaper

This whitepaper is a complete guide covering Alibaba Cloud's systematic and comprehensive measures for data and privacy protection.


Alibaba Cloud Security Whitepaper - International Edition V2.1

This whitepaper introduces the security of the Alibaba Cloud public cloud platform.


The Eight Stages of Cloud-Based Data Security

This whitepaper explains how Alibaba Cloud can help you build a robust data security framework to safeguard your data assets.


Cloud Firewall Obtained IPS Certification from ICSA Labs

This short article highlights Alibaba Cloud Firewall's recent achievement from ICSA Labs.


How Can You Protect Your Business with Security Services from Alibaba Cloud?

This blog explains how our cloud-based security services can help your organization address increasingly sophisticated attacks and minimize risk.


Protect your Business with Security Services from Alibaba Cloud

This webinar covers the key security solutions available that allow you to safely deploy your business on Alibaba Cloud.

Start with Alibaba Cloud Solutions

Learn and experience the power of Alibaba Cloud.

Contact Sales