Hey!

I'm wondering what you think about this. I'm thinking of making a SaaS application that is an admin panel for managing your site (not server) so you can edit content, images, etc. It would be hosted on MY server, but all of the databases would be on the client's server. The website would also be hosted on the client's server. Do you think this would be safe? Please let me know!!

Thanks,
Ben

You want safty for your application or DB ? however if you are worried for security of db then client should metain the safty.
One thing i will make it clear as we are alreadying providing this kind of service to our customer you have to make sure that client and your server are connected VIA SSL and fact line speed.

well when our server connects to the client's server, that would be SSL encrypted. So, if that's the case then it would be safe?

SSL should be "ok" but if security is a major thing then..

Id setup VPN tunnels to the boxes and create a fully meshed vpn network.
Id also setup the firewalls to ONLY allow those type of connections from each server ips.

Well we wont have any control over the client's server. They will just be allowing our IP via their HCP and giving us database access. Other then that we don't control anything that goes on there.\

and security isn't a HUGE concern, i just want to make sure it's not super easily hackable

i just want to make sure it's not super easily hackable

How can we tell you that on the information given.

It isn't what it does that makes applications vulnerable, but HOW they are coded.

they are coded okay, I'm only asking about what security measures to take, such as SSL, to make sure it's a pretty secure connection.