G-CLOUD - OCTANE AUTOMATED TESTING

Insights and Reporting

IB Boost can help you define metrics for performance which will allow you to identify your true capacity. For example, we can define tests that can increase loads until the point where thresholds have been breached such as the following:

• All web pages must load in an average of less than 3 seconds
• 99% of web page loads on a given page must be within 5 seconds
• The average time for a given user journey is less than 1 minute

Training and Ongoing Support

OCTANE's default web template is designed to be easily usable by the layman, however operational and functional support for the platform is available for a variety of service levels, including up to a 24/7/365 level of support via service desk, email, phone and live chat for our instances.

Interface

The OCTANE interface includes rich visual dashboards which store results and allow service quality checks to be undertaken on the performance characteristics of websites or other web services.

OCTANE for testing automation can be visually customised for your organisation and a managed service using an isolated, client-specific set of nodes will be operated, allowing control and security over your data and costs.

The ORQA tool can be used for testing automation and reconciliation of any nature, bringing together all of your tests into one platform, and allowing local or distributed execution in the cloud.

Compliance and Compatibility

OCTANE allows users to customise access to data of various sensitivity levels and includes a platform that permits connectivity to the UK government's PSN with either our cloud-hosted SaaS or fully-managed private or hybrid cloud installations, regardless of whether they are run on Azure, AWS, UKCloud, or other platforms (subject to appropriate accreditation according to data classification level and user environment).

User Administration and Application Security

The OCTANE web application is a security solution that's been accredited for use in various public-sector projects for data up to OFFICIAL-SENSITIVE in public cloud installations. The four-tier structure follows a blueprint for segregation of data that satisfies the highest public cloud infrastructure requirements in the UK public sector today.

Intrusion detection, active monitoring, firewalls and web traffic filtering further protects the system and OCTANE offers a web interface utilising the latest web server security and encryption standards, achieving an A+ in the Qualys SSL Labs analysis.

OCTANE regularly goes through independent penetration tests in addition to our own automated security analysis.

Data Control and Security

OCTANE uses strong role-based access control (RBAC) weaved throughout the entire framework at a foundational level and uses APIs to further segregate workloads and data permissions. In addition, a strong, permission-based object model can allow clients to further extend the data models to be customised precisely for their particular needs, allowing rich reports and real-time dashboarding.

Several logical organisations can also sit within the same distribution and operate entirely independently, allowing large-scale usage and sharing amongst teams and departments. Standard security principles like 'least-access' and 'deny-by-default' are built-in.

Access to the system can include restrictions across functions (horizontal) and within certain records inside data sets (vertical), limiting the rights and ability for different areas to affect each other. In-built sharing functionality permits views and dashboards to be managed and shared amongst users and groups of users in any combination (itself governed by customisable permissions). These are all made available for customisation by the client according to specific requirements.

Modern Technical Platform

OCTANE is based upon best-of-breed open source technologies and we embrace the cutting edge. Our solutions are containerised, operating system agnostic (based on Java), automated using Ansible and use the latest industry best DevOps practices.

Auditing and the Corporate Record

All data manipulation is indelible and audited. All designated business data objects are versioned and historised and can show exactly what data has changed and what it was at any given time in the past. All changes to data through the application are audited, whether through the user interfaces or APIs.