Mobile app version of vmapp.org
Login or Join
Gretchen104

: Is osTicket secure/private enough I was going to use osTicket as my 'help desk' for my website, however I just got a little bit concerned when I realised that the clients' login details to

@Gretchen104

Posted in: #Clients #CustomerService #Security #TicketSystem

I was going to use osTicket as my 'help desk' for my website, however I just got a little bit concerned when I realised that the clients' login details to see their support tickets are only their email address and a ticket ID. I am probably going over the top with security though, which is why I wanted to get some second opinions on how secure osTicket actually is and whether I should use it with my website. I run a software company, so chances are licence keys may be included in support tickets which are obviously sensitive information and valuable - so I want to ensure that the likelihood of a support ticket being hacked is very low.

If there is any plugins/additions to make osTicket more 'secure', I would appreciate it if you could point me to them. Otherwise if there are any more free, more suited, help desk softwares out there please let me know.

Thanks in advance

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Gretchen104

2 Comments

Sorted by latest first Latest Oldest Best

 

@Becky754

As an alternative to osTicket, since you're running a software company which likely includes development also, I'd recommend taking a look at Jira.

This offers an easy path for tracking and converting support issues (such as bugs) into project issues and tasks that can be assigned to individual staff or groups. For more on its features see: Jira Features

Different levels of security can also be assigned for issues and projects. See this for more on that: Jira - Configuring Security

It's not very difficult to setup (i.e., there's an installer with self-contained server), and the pricing is free to:

Open source projects that meet certain criteria, and organizations that are
non-profit, non-government, non-academic, non-commercial, non-political,
and secular.


For commercial or academic users, there are two paid options for either their hosted service, or per user running on your server, starting at just per 10 users (i.e., those accessing the application or project settings, not anonymous public access) - with a free 30-day trial.

You can see online video demonstrations of it here: JIRA Demonstration Video

10% popularity Vote Up Vote Down


 

@Barnes591

I would not use OSTicket for help desk if security is a concern. It's fine for simple support options but since you are developing software there is a PR cost to you if you use a tool that isn't up to standards or expectations. You want your users/customers to feel that you are a professional operation all the way around...short cutting on the web site can backfire on you.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme