2 Steps on-premise deployment model ensures minimal security implications.
● As the entire system resides inside the client site and there is no “phone home” functionality of any kind, there is no need to allow any additional access to the outside world/internet. ● 2 Steps needs to be given user credentials for the application it automates and network access to the system. ● The client has control over the Linux host on which the software runs and is therefore free to implement security controls such as full disk encryption and access controls. ● Monitoring data is not retained inside 2 Steps but merely forwarded on to Splunk meaning that there is no additional data breach risk implied by the addition of 2 Steps to their environment.