PowerBuilder Advanced Security
Stronger Security. Minimal Effort.
Upgrading to PowerBuilder 2025 R2 helps modernize your application's security with built-in security protections, support for modern security standards, and developer capabilities.
PowerBuilder 2025 R2 strengthens application security through:
Runtime & Executable Security
Protect application binaries, runtime execution, and deployment integrity.
Communication Security
Secure communications and authentication for APIs, services, and databases.
Client Data Protection
Protect sensitive business data with industry-standard encryption.
Browser Security
Reduce web-related risks with a modern Chromium-based browser engine.
Executable Security
Runtime & Executable Security
Harden your application executables with modern Windows security protections, including DEP, ASLR, CFG, and SafeSEH. These built-in executable security flags help reduce the risk of memory-based exploits, code injection, and unauthorized execution techniques with minimal configuration required in the PowerBuilder IDE.
Application Signing
Runtime & Executable Security
All PowerBuilder executables and runtimes are digitally signed using EV Code Signed certificates for robust security. We also empower developers to easily automate the signing of their PowerBuilder apps within the IDE using their own EV Code Signing certificates.
Secure DLL Loading
Runtime & Executable Security
Protect your applications against DLL hijacking and unauthorized library injection by restricting DLL loading to trusted paths only. PowerBuilder 2025 R2 also supports signature verification for PowerBuilder runtime files, helping ensure that only officially signed runtime DLLs are loaded at application startup.
Application Integrity Protection
Runtime & Executable Security
Projects deployed with the PowerClient are securely installed and updated to users over HTTPS. The client application will be automatically encrypted to prevent source code theft or tampering, automatically verified for integrity before executing to avoid executing harmful files, and digitally signed to conform to security best practices.
TLS 1.3 Compliance
Communication Security
Secure HTTP & Database communication with mutual TLS 1.3. TLS 1.2 is the minimum level considered to be secure, and is required for numerous regulatory compliances (e.g. PCI, HIPAA, GDPR, etc.).
API Authentication & Security
Communication Security
Secure REST services using OAuth 2.0, JWT tokens, and mutual TLS authentication. Support for modern authentication standards enables integration with enterprise identity providers and access management solutions, including those that offer Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
Data Encryption
Client Data Protection
Encrypt sensitive data using modern symmetric and asymmetric cryptography directly from PowerScript. Generate and manage encryption keys, encrypt and decrypt data, create digital signatures, and verify data integrity using industry-standard encryption, hashing, and signing algorithms—including AES-GCM, SHA-3, and modern digital signature standards.
Microsoft Edge Web Browser
Browser Security
Replace the deprecated Internet Explorer OLE control with the latest Microsoft Edge WebView2 control. The new "evergreen" deployment model of this control automatically benefit from the latest security updates and browser engine improvements as soon as released by Microsoft, keeping your apps as secure as possible.