# \#data-privacy-and-product-security **URL:** https://community.dynatrace.com/tag/data-privacy-and-product-security/903.md [Latest](https://community.dynatrace.com/latest.md) · [Categories](https://community.dynatrace.com/categories.md) · [Tags](https://community.dynatrace.com/tags.md) --- ## [Jetpack Compose supported version roadmap](https://community.dynatrace.com/t/jetpack-compose-supported-version-roadmap/57164)
**Author:** [@nikolaoravec](https://community.dynatrace.com/u/nikolaoravec)\ **Replies:** 1\ **Last updated:** [October 15, 2026, 11:11am UTC](https://community.dynatrace.com/t/jetpack-compose-supported-version-roadmap/57164 "2026-10-15T11:11:49Z")
Dear Dynatrace team, I am wondering when will support for composeMultiplafrom be bumped up from 1.10 to 1.12? I am having some vulnerability issues with two libs in compose that are not showing up with version 1.12 .S… --- ## [\[BYOK\] Secure data in the tenant with own company key](https://community.dynatrace.com/t/byok-secure-data-in-the-tenant-with-own-company-key/50756)
**Author:** [@tingrida](https://community.dynatrace.com/u/tingrida)\ **Replies:** 6\ **Last updated:** [October 1, 2026, 1:41pm UTC](https://community.dynatrace.com/t/byok-secure-data-in-the-tenant-with-own-company-key/50756 "2026-10-01T13:41:34Z")
Hi folks, In a DT blog from 2023 (Dynatrace Blog | Dynatrace news) we found some information about “… tenants can bring their keys for further encryption management.” There was even timeline for Implementation of it wh… --- ## [Best practice for application-level data segregation using Policy Boundaries in Gen3](https://community.dynatrace.com/t/best-practice-for-application-level-data-segregation-using-policy-boundaries-in-gen3/56906)
**Author:** [@andreaCaria](https://community.dynatrace.com/u/andreaCaria)\ **Replies:** 11\ **Last updated:** [September 14, 2026, 6:55am UTC](https://community.dynatrace.com/t/best-practice-for-application-level-data-segregation-using-policy-boundaries-in-gen3/56906 "2026-09-14T06:55:28Z")
Hi everyone, We’re currently reviewing our governance model on Dynatrace Platform (Gen3) and I’d be interested to understand how others are handling application-level data segregation. Our goal is to allow different te… --- ## [How do we view and confirm our current Data Retention Period values?](https://community.dynatrace.com/t/how-do-we-view-and-confirm-our-current-data-retention-period-values/46623)
**Author:** [@ASE](https://community.dynatrace.com/u/ASE)\ **Replies:** 4\ **Last updated:** [September 7, 2026, 9:53am UTC](https://community.dynatrace.com/t/how-do-we-view-and-confirm-our-current-data-retention-period-values/46623 "2026-09-07T09:53:38Z")
I need a little clarification on this. Are any of these retention values configurable? The way this chart reads, only Log Management and Analytics is configurable. Is this correct? Are these retention values visible… --- ## [Runtime Vulnerability Analytics (RVA) Support for AWS Lambda (Python)](https://community.dynatrace.com/t/runtime-vulnerability-analytics-rva-support-for-aws-lambda-python/56225)
**Author:** [@Jordi2](https://community.dynatrace.com/u/Jordi2)\ **Replies:** 2\ **Last updated:** [September 1, 2026, 11:33am UTC](https://community.dynatrace.com/t/runtime-vulnerability-analytics-rva-support-for-aws-lambda-python/56225 "2026-09-01T11:33:02Z")
Hello , We have deployed the Dynatrace OneAgent Lambda Layer to monitor our AWS Lambda functions running Python. I would like to clarify whether Runtime Vulnerability Analytics (RVA) is supported for AWS Lambda functio… --- ## [Best Practices & Scripts for OS / CIS Hardening on Dynatrace Managed Clusters](https://community.dynatrace.com/t/best-practices-scripts-for-os-cis-hardening-on-dynatrace-managed-clusters/56627)
**Author:** [@PradeepGM](https://community.dynatrace.com/u/PradeepGM)\ **Replies:** 0\ **Last updated:** [August 4, 2026, 9:15am UTC](https://community.dynatrace.com/t/best-practices-scripts-for-os-cis-hardening-on-dynatrace-managed-clusters/56627 "2026-08-04T09:15:56Z")
Hi Everyone, We are working on bringing our infrastructure into strict alignment with industry security standards (such as CIS Benchmarks, NIST, and DISA STIG). Our core objective is to apply a robust security posture t… --- ## [security\_context via host tags - documentation wrong?](https://community.dynatrace.com/t/security-context-via-host-tags-documentation-wrong/56405)
**Author:** [@r\_weber](https://community.dynatrace.com/u/r_weber)\ **Replies:** 1\ **Last updated:** [July 15, 2026, 4:22am UTC](https://community.dynatrace.com/t/security-context-via-host-tags-documentation-wrong/56405 "2026-07-15T04:22:08Z")
As per the documentation it should be possible to set the security\_context of a host via automated tagging rules: And then, in combination with the topology configuration rules set the security context according to t… --- ## [VA scan shows HSTS vulnerability for ActiveGate, Managed or OneAgent](https://community.dynatrace.com/t/va-scan-shows-hsts-vulnerability-for-activegate-managed-or-oneagent/40305)
**Author:** [@stefanie\_pachne](https://community.dynatrace.com/u/stefanie_pachne)\ **Replies:** 9\ **Last updated:** [June 23, 2026, 8:05am UTC](https://community.dynatrace.com/t/va-scan-shows-hsts-vulnerability-for-activegate-managed-or-oneagent/40305 "2026-06-23T08:05:19Z")
Self Service Summary Security Team is asking to “enable HSTS”, is alerting that “HSTS is missing”, “Strict Transport Security Not Enforced”, or that the “Strict Transport Security header is not present in the response” f… --- ## [Dynatrace server missing 'Cache-Control' response header](https://community.dynatrace.com/t/dynatrace-server-missing-cache-control-response-header/56192)
**Author:** [@AskMe-Solutions](https://community.dynatrace.com/u/AskMe-Solutions)\ **Replies:** 1\ **Last updated:** [June 17, 2026, 11:56pm UTC](https://community.dynatrace.com/t/dynatrace-server-missing-cache-control-response-header/56192 "2026-06-17T23:56:48Z")
The Dynatrace server should set the following ‘Cache-Control’ response header — is there a way to configure this, and if so, how --- ## [Centralized Security Rule Overrides at Tenant Level](https://community.dynatrace.com/t/centralized-security-rule-overrides-at-tenant-level/55549)
**Author:** [@zufarhanzakaria](https://community.dynatrace.com/u/zufarhanzakaria)\ **Replies:** 3\ **Last updated:** [April 15, 2026, 9:18am UTC](https://community.dynatrace.com/t/centralized-security-rule-overrides-at-tenant-level/55549 "2026-04-15T09:18:36Z")
Dynatrace currently supports overriding security rules through an override configuration file that must be deployed individually on each VM. Refer to Security rules — Dynatrace Docs While this approach works, it introdu… --- ## [Masking Sensitive Data to SHA-256](https://community.dynatrace.com/t/masking-sensitive-data-to-sha-256/55177)
**Author:** [@croweman](https://community.dynatrace.com/u/croweman)\ **Replies:** 1\ **Last updated:** [April 9, 2026, 6:34am UTC](https://community.dynatrace.com/t/masking-sensitive-data-to-sha-256/55177 "2026-04-09T06:34:28Z")
When using the SaaS platform and masking a value matched by a regex to SHA-256. Is the hashed value a standard SHA-256 or is some kind of salt involved? --- ## [Terraform Provider Export / Webhook header secrets](https://community.dynatrace.com/t/terraform-provider-export-webhook-header-secrets/55457)
**Author:** [@Ed\_Cox](https://community.dynatrace.com/u/Ed_Cox)\ **Replies:** 0\ **Last updated:** [April 2, 2026, 1:13pm UTC](https://community.dynatrace.com/t/terraform-provider-export-webhook-header-secrets/55457 "2026-04-02T13:13:28Z")
Using v1.93.0 Dynatrace Terraform Provider When exporting Webhook notification, the headers are exported as headers { header { name = “Authorization” secret\_value = “$${state.secret\_value}” value =… --- ## [Some simple questions/remarks about segments and security context](https://community.dynatrace.com/t/some-simple-questions-remarks-about-segments-and-security-context/52036)
**Author:** [@henk\_stobbe](https://community.dynatrace.com/u/henk_stobbe)\ **Replies:** 5\ **Last updated:** [February 23, 2026, 8:23pm UTC](https://community.dynatrace.com/t/some-simple-questions-remarks-about-segments-and-security-context/52036 "2026-02-23T20:23:37Z")
Hello All, To keep it simple: - Segments are simply put, filters and security context can be used as a kind of ACL - You can only have one security context, this is as designed - Security context is not available on… --- ## [CSI Driver down time is impacting Application Pods](https://community.dynatrace.com/t/csi-driver-down-time-is-impacting-application-pods/49797)
**Author:** [@Priyadarsini\_M](https://community.dynatrace.com/u/Priyadarsini_M)\ **Replies:** 5\ **Last updated:** [February 9, 2026, 11:07am UTC](https://community.dynatrace.com/t/csi-driver-down-time-is-impacting-application-pods/49797 "2026-02-09T11:07:25Z")
Hi Dynatrace Team, We are using Cloud Native Full stack where csi driver is getting used in our kubernetes cluster. Today in one of the cluster for completely different issue all the dynatrace and application pods are … --- ## [Dynatrace and Microsoft Extra ID](https://community.dynatrace.com/t/dynatrace-and-microsoft-extra-id/54826)
**Author:** [@henk\_stobbe](https://community.dynatrace.com/u/henk_stobbe)\ **Replies:** 0\ **Last updated:** [January 31, 2026, 8:19am UTC](https://community.dynatrace.com/t/dynatrace-and-microsoft-extra-id/54826 "2026-01-31T08:19:02Z")
Hello All, After adding Dynatrace from the gallery, you can do the SSO/SAML stuff. The SCIM has to be configured seperately. Should the SCIM part not be part of the that Dynatrace Marketplace? Maybe I am missing somet… --- ## [Secure Flag on Cookies - Understanding Findings from Third‑Party Security Assessments](https://community.dynatrace.com/t/secure-flag-on-cookies-understanding-findings-from-third-party-security-assessments/54803)
**Author:** [@LucaGalliani](https://community.dynatrace.com/u/LucaGalliani)\ **Replies:** 0\ **Last updated:** [January 30, 2026, 11:44am UTC](https://community.dynatrace.com/t/secure-flag-on-cookies-understanding-findings-from-third-party-security-assessments/54803 "2026-01-30T11:44:58Z")
Customers often contact us after receiving security reports from third‑party assessments or penetration tests indicating missing Secure attributes on certain cookies. This may raise questions about whether the flag shou… --- ## [dt.security.context for serverless components](https://community.dynatrace.com/t/dt-security-context-for-serverless-components/54486)
**Author:** [@michiel\_otten](https://community.dynatrace.com/u/michiel_otten)\ **Replies:** 7\ **Last updated:** [January 20, 2026, 9:21am UTC](https://community.dynatrace.com/t/dt-security-context-for-serverless-components/54486 "2026-01-20T09:21:45Z")
Hi community I’m trying to figure out what is the best way to set a dt.security.context on spans send by a server less feature like an Azure App Service. Are there any best practices around this? Although they have the… --- ## [Microsoft Defender Blocking an iframe in Dynatrace](https://community.dynatrace.com/t/microsoft-defender-blocking-an-iframe-in-dynatrace/51847)
**Author:** [@rgarzon1](https://community.dynatrace.com/u/rgarzon1)\ **Replies:** 4\ **Last updated:** [January 7, 2026, 8:36am UTC](https://community.dynatrace.com/t/microsoft-defender-blocking-an-iframe-in-dynatrace/51847 "2026-01-07T08:36:40Z")
Hello everyone, I am facing an issue with Dynatrace in the many environments (i just tested at least 10 of my enviroments) and Microsoft Defender is blocking an iframe with the source https://{environmentid}.apps.dynatra… --- ## [Secure Dynatrace API Token in Exported Azure ARM Templates](https://community.dynatrace.com/t/secure-dynatrace-api-token-in-exported-azure-arm-templates/52756)
**Author:** [@Jet](https://community.dynatrace.com/u/Jet)\ **Replies:** 1\ **Last updated:** [December 16, 2025, 1:22pm UTC](https://community.dynatrace.com/t/secure-dynatrace-api-token-in-exported-azure-arm-templates/52756 "2025-12-16T13:22:16Z")
We are installing the Dynatrace OneAgent on an Azure Managed Service Fabric cluster using an Azure ARM template. The Dynatrace API token is passed as a secret value with a reference to an Azure Key Vault secret. Basical… --- ## [Restrict access to http headers via policy?](https://community.dynatrace.com/t/restrict-access-to-http-headers-via-policy/53930)
**Author:** [@r\_weber](https://community.dynatrace.com/u/r_weber)\ **Replies:** 6\ **Last updated:** [November 13, 2025, 11:38am UTC](https://community.dynatrace.com/t/restrict-access-to-http-headers-via-policy/53930 "2025-11-13T11:38:33Z")
Hey, I’m trying to address a use case in the best fitting way. What I want to do: I have traces/spans where custom sensitive http headers are captured. I’m already lost at the capturing part due to the duplication of s… --- ## [Sensitive data masking](https://community.dynatrace.com/t/sensitive-data-masking/53742)
**Author:** [@marusla](https://community.dynatrace.com/u/marusla)\ **Replies:** 1\ **Last updated:** [October 22, 2025, 11:09pm UTC](https://community.dynatrace.com/t/sensitive-data-masking/53742 "2025-10-22T23:09:05Z")
Hello, can someone helpme, please, im trying to create an Search expression for hide some fields, like passport, id, an only showme the last 4 digit, can you helpme im trying with (.{4}) but this hide only the first 4 di… --- ## [Audit logs path for Dynatrace Managed](https://community.dynatrace.com/t/audit-logs-path-for-dynatrace-managed/12979)
**Author:** [@Babar\_Qayyum](https://community.dynatrace.com/u/Babar_Qayyum)\ **Replies:** 3\ **Last updated:** [October 21, 2025, 6:58am UTC](https://community.dynatrace.com/t/audit-logs-path-for-dynatrace-managed/12979 "2025-10-21T06:58:46Z")
Dear All, Please let us know the path location of the user activity logs for the audit purpose in case different than below. /var/opt/dynatrace-managed/log Regards, Babar --- ## [Synthetic Browser Monitors with MFA](https://community.dynatrace.com/t/synthetic-browser-monitors-with-mfa/52073)
**Author:** [@karthik\_laddipe](https://community.dynatrace.com/u/karthik_laddipe)\ **Replies:** 3\ **Last updated:** [October 7, 2025, 6:07pm UTC](https://community.dynatrace.com/t/synthetic-browser-monitors-with-mfa/52073 "2025-10-07T18:07:07Z")
We are soon going to have MFA enforced on all customer logins to our portals. This MFA is a regular OTP that goes to user’s as SMS or Email. From security stand point there is no way we can allow the user leveraged for … --- ## [Security problem notifications](https://community.dynatrace.com/t/security-problem-notifications/53631)
**Author:** [@Sachindthug](https://community.dynatrace.com/u/Sachindthug)\ **Replies:** 1\ **Last updated:** [October 7, 2025, 11:53am UTC](https://community.dynatrace.com/t/security-problem-notifications/53631 "2025-10-07T11:53:43Z")
can we setup service now and pagerduty for security problem notifications? --- ## [Security Concern: ActiveGate Service Account dtuserag and Permissions](https://community.dynatrace.com/t/security-concern-activegate-service-account-dtuserag-and-permissions/53388)
**Author:** [@jonghpark](https://community.dynatrace.com/u/jonghpark)\ **Replies:** 0\ **Last updated:** [October 7, 2025, 9:20am UTC](https://community.dynatrace.com/t/security-concern-activegate-service-account-dtuserag-and-permissions/53388 "2025-10-07T09:20:20Z")
\*Use a table of contents for longer articles. Self Service Summary The dtuserag account is a local, unprivileged Linux user created by the Dynatrace ActiveGate installer to run its services securely. While it cannot be… --- ## [Ability to use annotations/labels for Kubernetes security context](https://community.dynatrace.com/t/ability-to-use-annotations-labels-for-kubernetes-security-context/48232)
**Author:** [@ronmacdonald](https://community.dynatrace.com/u/ronmacdonald)\ **Replies:** 2\ **Last updated:** [September 30, 2025, 8:04pm UTC](https://community.dynatrace.com/t/ability-to-use-annotations-labels-for-kubernetes-security-context/48232 "2025-09-30T20:04:14Z")
It appears security context for log data only supports filters, not lookup or joins. I need to apply security context for logs by annotations/labels on the process group producing the logs. Is there a way to accomplish… --- ## [Security Concern: Password Complexity and Rate Limiting for User Login](https://community.dynatrace.com/t/security-concern-password-complexity-and-rate-limiting-for-user-login/53390)
**Author:** [@jonghpark](https://community.dynatrace.com/u/jonghpark)\ **Replies:** 0\ **Last updated:** [September 25, 2025, 9:44pm UTC](https://community.dynatrace.com/t/security-concern-password-complexity-and-rate-limiting-for-user-login/53390 "2025-09-25T21:44:31Z")
\*Use a table of contents for longer articles. Self Service Summary The security team is reporting an insufficient rate limiting on the Dynatrace Managed user login page, which allowed multiple password attempts and pot… --- ## [Illumio and Dynatrace Saas - compatibility, tips, issues?](https://community.dynatrace.com/t/illumio-and-dynatrace-saas-compatibility-tips-issues/53505)
**Author:** [@mpejic](https://community.dynatrace.com/u/mpejic)\ **Replies:** 0\ **Last updated:** [September 25, 2025, 6:05am UTC](https://community.dynatrace.com/t/illumio-and-dynatrace-saas-compatibility-tips-issues/53505 "2025-09-25T06:05:43Z")
Hi everyone, We’re currently exploring the co-existence of Illumio Application Segmentation and Dynatrace SaaS as an observability and monitoring solution. I’d love to hear from anyone who has experience using both plat… --- ## [SNMPv3 auth and privacy protocols](https://community.dynatrace.com/t/snmpv3-auth-and-privacy-protocols/53199)
**Author:** [@avdveen](https://community.dynatrace.com/u/avdveen)\ **Replies:** 0\ **Last updated:** [September 2, 2025, 6:58pm UTC](https://community.dynatrace.com/t/snmpv3-auth-and-privacy-protocols/53199 "2025-09-02T18:58:25Z")
Hello, Does Dynatrace (SNMP extensions / vault credentials) support HMAC\_SHA and CFB\_AES as authentication and privacy protocols? I see AES256C in the list of privacy protocols, which I assume is the same as CFB\_AES256,… --- ## [Getting Access Token Usage Information](https://community.dynatrace.com/t/getting-access-token-usage-information/37355)
**Author:** [@Raj](https://community.dynatrace.com/u/Raj)\ **Replies:** 5\ **Last updated:** [August 20, 2025, 10:44pm UTC](https://community.dynatrace.com/t/getting-access-token-usage-information/37355 "2025-08-20T22:44:18Z")
This question is in reference to monitor the access token usage where we have the option for extracting the last used time for a token however, there is no option to check how many times a token was used within a month a… [Next page](https://community.dynatrace.com/tag/data-privacy-and-product-security/903.md?match_all_tags=true&page=1&tags%5B%5D=data-privacy-and-product-security)