What a security review asks a website platform first
Updated: 6 days ago
A website platform decision now passes through security before it reaches procurement. The questionnaire tends to open the same way: who can access what, how data is encrypted, what's monitored around the clock and what's independently certified. Enterprise website security gets judged on those answers long before anyone looks at a template.
Multi-layered security at Wix answers those questions in six pages, from account controls to certifications.
Account-level controls
SSO works with Azure, Okta, Auth0 and Google. MFA covers every user through authenticator apps or SMS. Roles and permissions apply per site, site group or dashboard area, alongside IP allowlisting and a full audit log of changes to sites and assets.
Prevention, detection and response
Security is built into the development lifecycle, from threat modeling to penetration testing. Data in transit uses TLS 1.2+ and data at rest uses AES-256. A Security Operations Center monitors the platform 24/7/365, with anti-DDoS protection, a dedicated incident response team and a tested business continuity plan behind it.
Enterprise website security certifications
Wix holds SOC 2 Type 2 and ISO 27001, 27017, 27018 and 27701, and is a certified PCI DSS Level 1 service provider and merchant. It supports GDPR, CCPA and LGPD. Hosting runs on AWS and Google Cloud, with Equinix providing physical colocation.
Preview the full whitepaper
Key takeaway
Security reviews move faster when the controls, monitoring and certifications are documented in one place before the questionnaire arrives.
About Wix Enterprise
Wix Enterprise is the enterprise web platform for organizations that want to move fast. Security, governance and access controls are part of the platform, so teams launch and manage sites at scale while central teams keep permissions, SSO and audit trails in one dashboard. Request a consultation to walk through your requirements with the team.
