This article provides information about the level of security in EOC (Web Console, communication).
All EOC versions
The Orion EOC Web Console is not secured by default since it is utilizing HTTP protocol. However, you can configure the Web Console to support HTTPS protocol, which provides a layer of security to the communication between your web browser and the Orion EOC Web Console. You can check Microsoft IIS documentation on how to do it, for example here.
The communication between Orion EOC and any other Orion product servers is secure as it deploys HTTPS protocol in exchanging information.