TL;DR This is Part 3 of a three-part series on Collabora’s Security Architecture detailing the company’s multi-layered ‘security onion’ strategy. In Part 1 we explained how Collabora Productivity’s security strategy is built on organisation compliance from our ISO 9001 and ISO 27001 certifications and large-scale continuous automated crash testing, fuzzing...

TL;DR In Part 2, we continue revealing Collabora’s multi-layered ‘security onion’ by exploring the architecture of Collabora Online’s three main processes. We explain how the architecture isolates each document within its own secure container, strictly limiting system calls and filesystem access through technologies such as Seccomp-bpf. CoolWSD is the only...

TL;DR Collabora Productivity employs a multi-layered security onion strategy that covers many areas. In Part 1, we explain how our security is built on rigorous organisational compliance, including ISO 9001 and ISO 27001 certifications. This framework is bolstered by continuous automated testing, such as large-scale continuous fuzzing campaign and regular...