VMS Nexus / Security
Each person sees their sites —
and nothing else.
Roles, site scoping, a full audit trail and encrypted backups — on a server hardened against the OWASP Top 10.
Roles & permissions
Access that matches how you're organised.
Roles are bundles of permissions; users are limited to the companies and sites they look after — on every page, report, export and background job.
- Built-in and custom rolesSuper Admin, Administrator, Operator, Auditor, Investigator — or your own.
- Site scoping everywhereA user can't see, export or run jobs on recorders outside their sites.
- Session securitySecure cookies, CSRF protection and automatic sign-out.
Audit log
Who did what, and when.
Sign-ins, changes, exports, acknowledgements and background jobs are recorded and kept — the history can be read but never edited.
- Every actionFrom a bookmark to a firmware approval.
- System events tooInventory runs, alerts sent and backups verified.
- Long retentionKept for years, exportable for your auditor.
🛡
OWASP Top 10 hardened
Escaping, CSRF checks, SSRF guard on webhooks and scoped APIs throughout.
🔑
Encrypted backups
Nightly configuration snapshots, verifiable, optionally AES-256 encrypted.
⛔
Lockout-safe
Digest-only device access with an immediate stop on a refused login.
See it on your estate
Ready when your recorders are.
Tell us how many recorders and sites you run. We'll show you VMS Nexus working on a system of your size.