Your Trusted Partner for Compliance and Security

Powerful is SOC 2 compliant, an independent, third-party attestation that our controls for security, availability, and confidentiality meet a rigorous, audited standard. For the utilities, cooperatives, and civic organizations we serve, this means our systems are managed to the same level of scrutiny expected of enterprise technology providers.

Communities never sleep. Members log in, pay bills, report outages, and search for information around the clock, which means the systems behind your website need continual monitoring and protection. Every website we host is backed by proactive monitoring, layered defenses, and a support team that knows your organization by name.

Multiple Hosting Environments, One Standard of Care

Every organization has different scale, traffic, and compliance needs. That is why Powerful offers multiple levels of managed hosting environments, all built on Amazon Web Services, and both held to the same security standard:

Shared Web Hosting

A managed, multi-tenant environment ideal for utility organizations that want enterprise-grade hosting in a cost-effective package.

Dedicated Web Hosting

An isolated environment for utility organizations with higher traffic, stricter compliance requirements, or a preference for dedicated resources.

Custom Tailored Enterprise Web Hosting

For elevated compliance needs and the highest levels of traffic typically seen in larger utilities or organizations that have specific requirements, we can architect a solution tailored specifically to you including AWS GovCloud.

Whichever environment fits your organization, the maintenance, monitoring, and support described below are included.

Security and reliability are not premium features at Powerful. The following protections and services are included with every website we build and host, in both shared and dedicated environments:

Unlimited phone and email support

Web application licensing, updates, and support

Content management security updates

Brute-force security monitoring

Adherence to our Trusted Plugin Program (TPP)

Preventative care updates

Web Application Firewall status monitoring

Automatic blocking enabled in response to suspicious or malicious activity

Server management and monitoring

Server software updates and security patches

Redundant firewall solutions

Daily application disaster-recovery backups on a 10-day rotating cycle

For organizations that handle sensitive member or customer data, face heightened compliance obligations, or simply want the highest level of protection available, Powerful offers an opt-in premium level of security. Premium builds on everything included as standard and adds advanced defenses, encryption, and auditing:

Login-enabled two-factor authentication

Implementation and continuous support of dynamic DNS with the Cloudflare CDN

Content-editor password checks against known password exploits

Real-time IP blacklist and malware-signature updates

Automatic blocking of out-of-country traffic, with particular emphasis on adversary nations

Live traffic viewing, logging, and monitoring

Inbound traffic rate limiting

Quarterly web-form data audits, with collaboration to implement data-retention best practices

Secure-fields integration for web forms, automatically redacting sensitive data (PII) in the CMS and in email delivery

Military-grade AES-256 encryption of sensitive web-form data (PII) within the website back-end database

Full compliance with, and an annual audit against, the OWASP Application Security Verification Standard

Ongoing Risk Mitigation

Cybercrime is an ongoing threat to the utilities, cooperatives, and local governments we serve. We are confident that our systems and infrastructure safeguard our clients’ digital content, and we work continuously to stay ahead of evolving threats.

Our standing safeguards include:

  • Continuous monitoring of hosted websites
  • Regular system vulnerability assessments
  • Secure development practices that protect against cross-site scripting (XSS), SQL injection, and other unauthorized-access techniques
  • Routine third-party scans to identify and mitigate vulnerabilities
  • Disciplined account validation, with automatic removal of questionable accounts

Reporting a Security Concern

We value our clients, partners, and the broader security-research community, those who proactively and responsibly help maintain strong security standards across our shared industry. To protect our clients and systems, Powerful does not publicly discuss reported security concerns until we have completed our internal research and evaluation.

If you have a security question or wish to report a concern, we ask that you:

  • Allow Powerful a reasonable timeframe to investigate and respond
  • Refrain from publicly sharing reported information before we have responded and completed any necessary mitigation
  • Make a good-faith effort to avoid privacy infringement, data destruction, or service disruption while investigating

Powerful Customers

If you are utility organization currently working with Powerful and are looking for technical support.

Submit a Support Request

3rd Party Partners

Questions about our security and web hosting capabilities?

Contact Our Security Team

Members of Media

Represent a media organization and would like to inquire about our security?

Submit a Media Inquiry

Ready to Talk Security?

Whether you are evaluating shared or dedicated hosting, weighing the premium security package, or simply want to understand how your members’ data is protected, our team is ready to help.

Contact Us