Pages on specific Nextcloud security and governance features that administrators design and roll out: encryption, access control and retention, guests, antivirus, full text search and two-factor authentication.
Choosing between Nextcloud server-side encryption with a master key or user keys, end-to-end encrypted folders and disk encryption, based on who must be unable to read the data and what each method breaks.
Enforcing data handling rules in Nextcloud with File Access Control rule groups, restricted tags and automatic retention deletion, including the Context Chat exception and testing rules before rollout.
Designing safe collaboration with outsiders in Nextcloud: guest accounts limited to shared files, public link policies, federated sharing between servers and the controls administrators should set.
Scanning uploads and stored files in Nextcloud with the Antivirus for files app and ClamAV or an ICAP scanner, including background scans, handling infected files and performance on large uploads.
Adding content search across documents with the Nextcloud full text search apps and an Elasticsearch backend: index sizing, initial indexing time and permission-aware results.
Enforcing two-factor sign-in on Nextcloud with WebAuthn security keys or TOTP, handling desktop and mobile client app passwords, and deciding when to rely on the identity provider's MFA instead.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.