Applications Manager's APM Insight Auto Profiler agent security
Applications Manager's APM Insight Auto Profiler ensures secure communication and data handling by implementing industry-standard security practices. Below is a breakdown of our key security measures:
Disclosure and auditing
To maintain system integrity, the agent strictly abstains from dynamic code generation during its interaction with your application. This ensures that no unauthorized logic or scripts are introduced into your application environment without explicit oversight. By adhering to a 'read-and-respond' framework, it ensures that every interaction is governed by vetted logic rather than real-time code synthesis.
Data transmission & synchronization
The agent utilizes a highly structured protocol to transmit performance data to the Applications Manager at one-minute intervals. To ensure data integrity, every transmission is governed by a bidirectional handshake:
- Acknowledgment: The Applications Manager servers confirm successful receipt of each data packet.
- Error Handling: If a transmission fails, an error response is triggered to ensure immediate visibility into the communication gap.
Core metrics collected:
Applications Manager collects the following aggregated metric data:
- Execution flow: Detailed transaction activity and deep-dive application-level code traces.
- Data & integration: Real-time monitoring of database activity and external web service calls.
- User experience: Precise tracking of view rendering activity.
- System stability: Automated logging of uncaught exceptions and their total frequencies.
- Infrastructure health: Continuous monitoring of process memory and CPU utilization.
Security and compliance standards
The APM Insight Auto Profiler agent adheres to a multi-layered security framework designed to protect application data and infrastructure integrity.
Digital Governance
- Compliance: Full alignment with ISO/IEC 27001:2013 and OWASP Top 10 standards to mitigate risks such as Cross-Site Scripting (XSS) and security misconfigurations.
- Web Protection: Integrated defenses against XSS, CSRF, and other prevalent web-based threats.
Physical Infrastructure
- Facility Security: Servers are housed in undisclosed locations featuring bullet-resistant construction.
- Surveillance: Continuous 24/7/365 monitoring via infrared security cameras and automated access logging.
- Access Control: Physical entry is restricted through biometric verification and two-factor authentication (2FA).
Data availability and resiliency
The APM Insight Auto Profiler operates as a background service on Windows or Linux, collecting telemetry locally before transmitting it securely to the Applications Manager server.
- Localized collection: The agent captures data locally to prevent loss during temporary network outages.
- Secure transmission: All telemetry is sent via HTTPS to a load-balanced endpoint for high availability and encrypted communication.
- Infrastructure redundancy: The Applications Manager endpoint utilizes a load-balanced environment to distribute agent data across multiple healthy backend nodes. This configuration provides:
- High availability: Continuous uptime for data ingestion.
- System redundancy: Internal failover capabilities to handle high traffic volumes.
- Node-level resilience: Automatic mitigation against individual component or node failures.
This distributed framework ensures that performance monitoring remains seamless, even if specific server-side components are affected.
APM Insight agent operational impact
The APM Insight Auto Profiler is engineered for minimal overhead, to enable for real-time telemetry collection in production environments without compromising application performance. Refer the below table for the agent's typical system resource footprint across supported operating systems:
| Metric (usage) | Windows | Linux |
| CPU | < 1% | < 1% |
| Memory | 20MB | 25MB |
| Bandwidth | < 20KB every 1 minute | < 20KB every 1 minute |
| Disk space | 100MB | 200MB |
Benchmark Analysis: Application stability with APM Insight Auto Profiler
The APM Insight Auto Profiler has been rigorously benchmarked to ensure its continuous profiling remains non-intrusive and maintains a negligible performance impact. For comprehensive insights into the APM Insight Auto Profiler’s CPU, memory, and I/O usage during application profiling across all supported platforms, please refer to the following technical documentation and performance reports:
