ZoTrus Website Security Solution
Micro reconstruction, zero installation, zero maintenance, automatic, SM2, PQC
- HTTPS encryption is the core security of zero trust security
- Never trust http cleartext connections, always verify, only trust https encrypted connections
- Never trust every web connection, always verify, allow normal connections and block malicious
- Fully automatic implementation of PQC migration, SM2 https encryption, WAF protection, adaptive algorithm
Countdown the shortening of the SSL certificate validity left: D 270 H 14 M 14 S 14. Hurry up to implement automatic management of SSL certificates.
PQC Edition
PQC HTTPS Automation Gateway
Once deployed, micro reconstruction to realize PQC/ECC/SM2 HTTPS automation and WAF protection.
Learn more
Internet Edition
HTTPS Automation Gateway
Once deployed, micro reconstruction to realize HTTPS automation and WAF protection.
Learn more
Intranet Edition
HTTPS Automation Gateway
Once deployed, micro reconstruction to realize Intranet Web Systems HTTPS automation and WAF protection.
Learn more
WAF Edition
WAF Automation Gateway
Once deployed, micro reconstruction to realize WAF protection and HTTPS encryption.
Learn more
HTTPS Automation Cloud Service
Share the cloud deployed gateway, one-time domain resolution, micro reconstruction to realize HTTPS automation and WAF protection.
Learn more
HTTPS encryption and WAF protection automatically for the compliance of cybersecurity protection and cryptography protection!
- HTTPS Automation Gateway
- HTTPS Automation Cloud Service
- SSL Certificate Automation
- SM2 ACME Eco
- PQC Migration
- Cybersecurity Compliant
- Cryptography Compliant
HTTPS Automation Gateway, micro reconstruction to realize SM2 https encryption
- The original website no need to change anything, automatic implementation of SM2 algorithm https encryption
- Support PQC/SM2/ECC algorithm https encryption, adaptive algorithm, SM2+PQC algorithm is preferred
- Build-in ACME client, auto-configure dual-algorithm dual-SSL certificates, support dual certificate transparency
- HTTPS acceleration, offloading and http forwarding, support load balancing, support dual-machine hot backup
- One Gateway HTTPS concurrent: 1.5 million+, HTTPS throughput: 9 Gbps+
- Deploy multiple machines, supporting HTTPS connections of millions or tens of millions
HTTPS Automation Cloud Service, micro reconstruction to realize SM2/ECC HTTPS encryption and cloud WAF protection
- Based on Alibaba Cloud WAF, it is the only WAF product in China that has won the WAF Grand Slam (Gartner, Forrester, IDC, Frost & Sullivan).
- It has multiple protection rules of Alibaba Cloud's exclusive self-developed rules + AI deep learning + active defense, multi-line node disaster recovery, intelligent optimal path, and millisecond-level response.
- One-stop protection for web vulnerabilities (including Alibaba Cloud's exclusive 0day), web attacks, machine traffic, data and account security.
- IP address as source, the web server supports both Alibaba Cloud and non-Alibaba Cloud, and easily and fully realizes site-wide https encryption and site-wide security protection.
- Annual billing, including SSL certificate fee, automatic deployment of dual SSL certificates (SM2/ECC), low-cost enjoyment of Alibaba Cloud WAF service.
Automatic free configuration of dual-algorithm SSL certificates, adaptive algorithm https encryption
- Free supporting products for ZoTrus SM2 HTTPS automatic management solution
- SM2 SSL certificate + ECC SSL certificate = Cryptography Compliance + Global Trust
- No need to spend money to apply for SSL certificate from CA, free configuration of the dual-algorithm SSL certificate
- SM2 SSL certificate supports all SM2 browsers
- ECC SSL certificate supports all browsers
- SM2 SSL certificate supports SM2 certificate transparency
- ECC SSL certificate supports international certificate transparency
SM2 ACME eco-products, eliminate "Not secure" warning from browsers in 10 minutes
- SM2 ACME eco-products, automatically realize https encryption within 10 minutes, all browsers will no longer display “Not secure”
- SM2 https encryption is automatically implemented within 10 minutes, meeting the requirements of cryptography compliance
- ECC https encryption is automatically implemented within 10 minutes to meet the needs of global trust
- It is optional to install the SM2 ACME Client on the server, which is free forever
- It is optional to deploy the SM2 HTTPS Gateway in front of the server, zero change of the original server
- It is optional to deploy the SM2 WAF Gateway in front of the server, zero change of the original server
- It is optional to use the SM2 Cloud WAF Service, no need to deploy any hardware, zero change of the original server
Enable PQC HTTPS Encryption Immediately
- Attackers are collecting encrypted traffic so that they can decrypt all confidential information once a quantum computer is available. This is the "harvest now, decrypt later" attack.
- Deploy a ZoTrus PQC Gateway to immediately enable post-quantum cryptography HTTPS encryption, ensuring the security of confidential data in the present and the quantum era.
- Deploy a ZoTrus PQC Gateway to immediately automate the management of dual-algorithm (SM2/ECC) SSL certificates, solving the problem of SSL certificates being shortened to 47 days.
- Deploy a ZoTrus PQC gateway to immediately complete commercial cryptography transformation and successfully pass the commercial cryptography evaluation.
- Deploy a ZoTrus PQC gateway to eliminate the need to purchase WAF equipment, automating the offloading, cleaning, and forwarding of HTTPS encrypted traffic.
10 minutes to let the browser address bar show that the website is cybersecurity protection compliant
- The CNAME DNS resolution takes effect in 10 minutes, and cloud WAF protection is enabled immediately
- ZT Browser is the first in the world to display WAF-protected websites in the address bar.
- Clicking the WAF protection icon will display “Cybersecurity Protection Compliant” and the WAF protection by Alibaba Cloud and the cloud WAF domain
- Cloud WAF verifies each web connection, allows normal connection and blocks illegal connection, and protects web application security
- Cloud WAF protection can meet the cybersecurity protection compliant requirements such as "invasion prevention", "malicious code prevention", and "data integrity (anti-tampering)".
ZT Browser displays the website being “Cryptography Protection Compliant (SM2)”
- ZT Browser prefer to use SM2 algorithm for https encryption, and the address bar display
icon - Click the icon, display " Cryptography Protection Compliant, Certificate Transparency", and explain the
HTTPS encryption SM2 algorithm in detail
- SM2 Certificate Transparency, reliably guarantees the security, trust, and interest of each SM2 SSL certificate for customer
- SM2 algorithm HTTPS encryption can meet the cryptography protection requirement in secure communication to protect data integrity, confidentiality and authenticity of identity using cryptography technology.
- SM2 algorithm HTTPS encryption can also meet the cryptography protection requirement in application security and data security to protect data confidentiality and integrity in transmission and storage procedure using cryptography technology.
Website security requires automatic implementation of PQC and SM2 HTTPS encryption, WAF protection, and trusted identity!
Website security requires fully automatic HTTPS encryption and automatic management of SSL certificates. Website security further requires post-quantum cryptography HTTPS encryption to ensure the continued security of confidential data in the present and the quantum era. Website security also requires reliable WAF protection. Website security also requires trusted identity validation. ZoTrus Technology provides the truly necessary website security solutions, enabling fully automatic PQC migration, commercial cryptography compliance, and cybersecurity protection compliance with a single deployment or single resolution.
Automatic SSL Certificate Management
SSL certificate validity will be shortened to 47 days, and all websites must implement automatic SSL certificate management. All critical information infrastructure website and system must realize the automatic management of both SM2 SSL certificates and RSA/ECC SSL certificates. The only feasible solution is to deploy ZoTrus Gateway that no any change to existing web server. The price of each gateway includes 5 years of dual-algorithm SSL certificates (SM2 OV SSL certificate + ECC DV SSL certificate) for up to 255 websites.
PQC HTTPS Automation
HTTPS encryption using traditional cryptographic algorithms such as RSA/ECC/SM2 already poses a "harvest now, decrypt later" threat. It is imperative to immediately enable post-quantum cryptography HTTPS encryption, deploy ZoTrus Gateway, seamlessly and automatically migrate to support PQC algorithm, and implement HTTPS encryption using a hybrid algorithm combining international and national cryptographic PQC algorithms, effectively ensuring the continued security of website confidential data in the present and the quantum era.
Global Trust, China Cryptographic Compliance
ZoTrus HTTPS automation solution automatically configures dual-algorithm SSL certificates. International algorithm SSL certificates support all browsers, ensuring global trust and supporting automatic issuance and switching of issuance channels from 7 international CAs. SM2 SSL certificates support all SM2 browsers, ensuring compliance with Chinese cryptographic standards and supporting automatic issuance and switching of issuance channels from 4 China CAs. This multi-channel SSL certificate issuance ensures that ZoTrus Gateway can automatically provide SSL certificates for customers’ websites under any circumstances.
WAF Protection, Cybersecurity Protection Compliance
ZoTrus HTTPS Automation Gateway features a built-in high-performance WAF module with a Ture Positives detection rate of up to 97.34% (Level A, highest level) and a False Positives detection rate of up to 100% (Level A). Customers do not need to purchase additional WAF devices that do not support automatic SSL certificate management. It automatically offloads HTTPS encrypted traffic, efficiently cleans it, and forwards it to internal web servers, ensuring web application security and meeting information security protection compliance requirements.
One-time Setup, Worry-free Security
Only need to deploy the HTTPS Automation Gateway once, or once to resolve the domain name, automatically and quickly realize https encryption and WAF protection, the website is secure. No need to apply for SSL certificate, no need to install SSL certificate, no need to install ACME client software, no need to renew SSL certificate! It takes 10 minutes to automatically realize website security protection such as PQC and SM2 https encryption, cloud WAF protection, trusted identity certification, and CDN distribution.
Website Trusted Identity, Security Dashboard
ZT Browser, a completely free, clean, and ad-free browser that integrates perfectly with ZoTrus HTTPS Automaton Gateway, directly displays the SM2 cryptography icon, PQC icon, and organization name in the address bar. This proves that customer's website has undergone PQC migration and compliance with commercial cryptography and cybersecurity protection standards. The trusted identity icon and green address bar allow site visitors to immediately understand the website's trustworthiness, enhancing online trust and leading to more online orders.
SM2 HTTPS Encryption Ecosystem Construction
- Introduction to the International Certificate Transparency ecosystem
- Commercial Cryptography Certificate Transparency ecosystem construction
- Introduction to the International Automatic Certificate Management Environment
- Commercial Cryptography Automatic Certificate Management Ecosystem construction
Web Security 2.0
- Fully automatic implementation of https encryption
- Fully automatic configuration of publicly trusted and cryptography compliance dual SSL certificates
- Automatically enable WAF protection
- Website trusted identity validation, ZT Browser display green address bar
