PowerBuilder Advanced Security
Upgrade Your Security with PowerBuilder
PowerBuilder 2025 R2 provides numerous new features to strengthen your application security, many of which can be implemented with minimal effort.
Advanced Executable Security
Harden your application executables with modern Windows security protections including DEP, ASLR, CFG, and SafeSEH. These built-in executable security flags help reduce the risk of memory-based exploits, code injection, and unauthorized execution techniques with minimal configuration required in the PowerBuilder IDE.
Mutual TLS 1.3 Compliance
Secure HTTP & Database communication with mutual TLS 1.3. TLS 1.2 is the minimum level considered to be secure, and is required for numerous regulatory compliances (e.g. PCI, HIPAA, GDPR, etc.).
Application Encryption
Projects deployed with the PowerClient are securely installed and updated to users over HTTPS. The client application will be automatically encrypted to prevent source code theft or tampering, automatically verified for integrity before executing to avoid executing harmful files, and digitally signed to conform to security best practices.
Application Signing
All PowerBuilder executables and runtimes are digitally signed using EV Code Signed certificates for robust security. We also empower developers to easily automate the signing of their PowerBuilder apps within the IDE using their own EV Code Signing certificates.
Data Encryption
Encrypt your data with some of today’s strongest asymmetric and symmetric encryption algorithms. All key encryption-related steps from generating keys to verifying data integrity can be performed natively in PowerScript.
Secure DLL Loading
Protect your applications against DLL hijacking and unauthorized library injection by restricting DLL loading to trusted paths only. PowerBuilder 2025 R2 also supports signature verification for PowerBuilder runtime files, helping ensure that only officially signed runtime DLLs are loaded at application startup.
Web Service Security
Authenticate REST Web services with OAuth2.0 or JWT tokens by utilizing the new HTTPClient. OAuth2.0 is considered to be far more secure than older authentication schemes, especially basic authentication. You can also secure your REST Web services with two-way TLS Authentication.
WebView2 Web Browser
Improve Web browser security by replacing the obsolete OLE browser (Internet Explorer 7) with the WebView2 WebBrowser control. Internet Explorer 7 has many known security vulnerabilities and is no longer maintained by Microsoft.