---
title: "Security overview"
slug: "security-overview"
abstract: "Introduction to security practices and guidelines related to infrastructure, data ingestion, and user management."
---
# Security overview

All Sitecore Content Hub products integrate industry-standard security methods and best practices to protect data against potential attacks. We understand that security is a major concern when running web applications, as they can be the target of various kinds of attacks. Sitecore Content Hub relies on several counter measures to avoid such attacks.

We provide a set of practices and guidelines to mitigate the risk of a security breach. They are described in the following sections.

- Infrastructure
    - [Cross-site request forgery](https://doc.sitecore.com/ch/en/developers/cloud-dev/security-threats-and-mitigation.html#UUID-67f6e457-b2c9-10d7-4564-3e6f14c1ea05_section-idm234567921847582 "CSRF attacks")
    - [Cross-site scripting (XSS)](https://doc.sitecore.com/ch/en/developers/cloud-dev/security-threats-and-mitigation.html#UUID-67f6e457-b2c9-10d7-4564-3e6f14c1ea05_section-idm234567923349217 "XSS attacks")
    - [Web server](https://doc.sitecore.com/ch/en/developers/cloud-dev/web-server-security.html "Web server security")
    - [Encryption and cryptography](https://doc.sitecore.com/ch/en/developers/cloud-dev/encryption-and-cryptography.html "Encryption and cryptography")
    - [Throttling](https://doc.sitecore.com/ch/en/developers/cloud-dev/throttling.html "Throttling")
- Ingestion
    - [Excel data import protection](https://doc.sitecore.com/ch/en/developers/cloud-dev/secure-data-imports.html "Secure data imports")
    - [Asset upload](https://doc.sitecore.com/ch/en/users/content-hub/upload.html)
- User management
    - [User onboarding/offboarding](https://doc.sitecore.com/ch/en/users/content-hub/manage-users-in-content-hub.html)
    - [Personal data](https://doc.sitecore.com/ch/en/developers/cloud-dev/data-privacy.html#UUID-14063778-fa0c-0486-0696-220c7af08cda_section-idm234543880708947 "Personal data")

> [!note]
> For further information about data privacy and security, see the Sitecore [Trust Center](http://www.sitecore.com/trust) and [Global privacy guide](https://doc.sitecore.com/developers/103/platform-administration-and-architecture/en/global-privacy-guide.html).