What are OpsIQ 2FA recovery codes?
Recovery codes are emergency sign-in or verification codes generated when you enable two-factor authentication (2FA). Each recovery code is designed to work only once, so a used code should not be expected to work…
Can I review recent security activity?
Yes, you can review recent security activity. The Security area provides information such as the time, action, network address, and device context where available. Use this information to investigate unfamiliar account…
Enterprise Security & Trust: Identity, Code, Data, AI and Audit · OpsIQ
Enterprise Security & Trust: Identity, Code, Data, AI and Audit — OpsIQ In today's digital landscape, enterprise security must encompass a comprehensive approach that extends beyond mere login credentials. OpsIQ…
Does OpsIQ support IP or CIDR blocking?
Yes, OpsIQ supports IP and CIDR blocking as part of its operational hardening features. This includes IP/CIDR controls, visitor risk classification, threat scoring, rate limiting, and bot/security signals. It is…
Does changing my password sign out other devices?
Yes, changing your password will sign you out of other devices. A successful account password change revokes all other customer portal sessions, ensuring that old authenticated sessions cannot continue indefinitely…
My 2FA setup expired. What should I do?
If your two-factor authentication (2FA) setup has expired, you will need to start the enrollment process again from the Security page. Follow these steps to verify the new setup: Access the Security page. Initiate the…
Are account operations protected from accidental cross-site submissions?
Sensitive customer actions are submitted through protected account forms rather than relying solely on a browser-visible button. If your account rejects an old or invalid request, please reload the official account page…
Are OpsIQ webhooks secure?
OpsIQ signs webhook payloads using HMAC-SHA256 over the raw body and implements timestamp and replay protections, along with per-connector secret rotation. Receivers should verify the signature and timestamp before…
How do I enable 2FA on my OpsIQ account?
How to Enable 2FA on Your OpsIQ Account To enable two-factor authentication (2FA) on your OpsIQ account, follow these steps: Open the Security & 2FA section in your account settings. Start the setup process for 2FA. Add…
How does OpsIQ encrypt data?
OpsIQ's Trust Center states that cloud data is protected with AES-256 encryption at rest, utilizing per-tenant key separation, and TLS 1.3 for data in transit. Secret keys and webhook-signing secrets are sealed and are…
How do I disable two-factor authentication?
To disable two-factor authentication (2FA), navigate to the Security page. You will need to prove control by using a valid current authenticator code or an unused recovery code. This process ensures that someone who…
How should I report a security vulnerability to OpsIQ?
Reporting a Security Vulnerability to OpsIQ To report a security vulnerability to OpsIQ, please use the dedicated security disclosure contact provided in OpsIQ's contact or security materials. It is important to avoid…
What should I do if I accidentally expose an API token?
If you accidentally expose an API token, it is crucial to take immediate action to protect your account and data. Follow these steps: Steps to Take Disable or delete the exposed token immediately from the API Tokens…
Does OpsIQ support two-factor authentication for customer accounts?
Yes, OpsIQ supports two-factor authentication (2FA) for customer accounts. The customer Security page allows for time-based one-time password (TOTP) two-factor authentication. You can enroll using Google Authenticator…
How do I sign out another device from my OpsIQ account?
To sign out another device from your OpsIQ account, follow these steps: Revoke Active Sessions Open the Sessions & Devices section. Identify the active session that you no longer trust or need. Revoke that session. Once…
What should I do if I see an unfamiliar session?
If you encounter an unfamiliar session, take the following steps immediately: Revoke the session to prevent any unauthorized access. Change your account password to secure your account. Review Security activity for any…
Can I see which devices are signed into my OpsIQ account?
Yes, you can see which devices are signed into your OpsIQ account. The Sessions & Devices feature lists customer portal sessions along with device or browser information, network address, last-seen time, and whether the…