ONGOING ENGAGEMENTS
Private client workspace
A named client space protected by password and MFA, with a clear separation between documents sent to Bitwise Security and reports shared back.
[ SECURE FILE PORTAL ]
SENSITIVE FILES. CONTROLLED DELIVERY.
A private route for the documents that should never become ordinary email attachments. Clients can upload sensitive material and receive completed reports through an encrypted, malware-screened workspace.
PRIVATE BY DEFAULT
No anonymous file sharing
B
01No public or anonymous file listings
02Every client space is isolated
03Files are downloaded, never previewed inline
04Expiry and permanent deletion controls
Access is explicitly granted. Knowing a file identifier is never enough to retrieve a customer's data.
ONE-OFF DELIVERY
Password-protected transfer
A time-limited download link for recipients who do not need an account. The link and generated password are shared through separate channels.
FROM UPLOAD TO DELETION
A deliberate transfer workflow
Choose the recipient
Use an MFA-protected client space for ongoing work or a seven-day password-protected link for one-off delivery.
Encrypt before storage
The browser encrypts file chunks with AES-256-GCM before encrypted object data is written to private storage.
Quarantine and screen
Uploads remain unavailable while file-type checks and continuously updated malware signatures screen the content.
Deliver with control
Short-lived, single-use download tickets prevent a copied download address from becoming permanent access.
Track accountability
Uploads, downloads, deletions, sign-ins and permission changes are recorded in the administrative security log.
Close the engagement
Automatic expiry is available per file, and completed client spaces can be permanently removed with explicit confirmation.
SECURITY MODEL
Security without making clients fight the interface
The portal keeps the sensitive controls behind a straightforward workflow: choose a space, choose a file, and send. Stronger protections such as MFA, object-level authorization, CSRF protection, rate limiting and one-use tickets operate without adding unnecessary decisions for the recipient.
CONTROL 01
AES-256-GCM authenticated encryption
CONTROL 02
Private Cloudflare R2 object storage
CONTROL 03
Password plus TOTP MFA for accounts
CONTROL 04
Argon2id password protection
CONTROL 05
Malware scanning before availability
CONTROL 06
Audited access and deletion
SANITIZED PRODUCT VIEWS
The secure portal in use
All screenshots contain fabricated demo names and files. No customer data is shown.
Clear, protected sign-in
Open the preview for a closer look
Open the full image preview
Controlled client workspace
Open the preview for a closer look
Open the full image preview
One-off secure delivery
Open the preview for a closer look
Open the full image preview
Simple client experience
Open the preview for a closer look
Open the full image preview
RETENTION & GDPR
Designed for the end of the engagement
Sensitive assessment data should not remain online by accident. Files can expire automatically, protected links expire after seven days, and an administrator can permanently delete a completed client space and its stored objects. Minimal content-free audit evidence may be retained for security accountability.
START SECURELY
Need to send something sensitive?
Contact Bitwise Security first. You will receive either a private account invitation or a protected transfer link appropriate for the engagement. Never send sensitive assessment material through the normal contact form.