Our approach
Security and privacy our way
SCW'S Trust Centre is currently unavailable. For all enquiries/requests for security documentation, please contact security@securecodewarrior.com.
We apologise for any inconvenience.
Data security & privacy
Learn more about how we safeguard our information assets, and those of our customers, against misuse, abuse or compromise.
Trusted by over 600 enterprises globally
Tools
How we secure our products
Cloud security & best practices
Our services are hosted on Amazon Web Services infrastructure and we use MongoDB Atlas for storage. We leverage their world-class data centers in the US and EU to protect information and meet core security and compliance requirements. More information about their security practices is available at: AWS Security & MongoDB Security
Training and awareness
As part of our initial onboarding process, as well as on an ongoing basis (at least annually), all staff receive training regarding their respective information security/privacy obligations. In addition. our engineers perform secure code training on the OWASP Top 10
Vulnerability management
We continuously monitor for malicious activity, and regularly scan our infrastructure, applications and third-party libraries for known vulnerabilities. All our products go through a series of peer reviews and security assessments prior to deployment, including third-party library scanning, static code analysis and static container analysis. We also regularly engage expert third-parties to perform penetration tests in addition to our internal testing and scanning programs.
Access and authentication
We support single sign-on (SSO) so you can implement your own authentication systems to control access to our platform. Within Secure Code Warrior, we implement least privilege principles and access to production data is restricted through security groups and limited to staff that strictly need it for support. We also use multi-factor authentication (MFA) and ephemeral credentials to strictly control access to production systems
Our security program
Your personal data is important to us and we are committed to protecting it through close adherence to international regulations and industry best practice.
Security certification & documentation
AICPA SOC 2 Type 2
We know that you entrust Secure Code Warrior with confidential information from your use of our product offerings. To this end, we take the protection and confidentiality of your data extremely seriously. We continuously pursue the highest technical standards, organizational measures, and industry-recognized best practices so that all of our customers have trust and confidence in Secure Code Warrior.
To show our commitment, Secure Code Warrior has successfully attained its SOC 2 Type II report demonstrating that we have the appropriate controls in place to mitigate risks related to security, availability, and confidentiality. A SOC 2 report is designed to meet the needs of customers who require assurance about the effectiveness of controls of a SaaS vendor like Secure Code Warrior. The report is the outcome of an audit performed by an independent third-party firm certified by the American Institute of CPAs (AICPA).
These audits are an industry-wide standard to assess the data security and privacy of software vendors. Our Type II audit is the most robust type and set out to prove that we had controls in place for a sustained period of time, exhibiting reliable and consistent safeguards in place to protect our customers’ data. If you are interested in our SOC 2 report, reach out to your account manager or email our support team - support@securecodewarrior.com.
ISO 27001:2013 / ISO 27701:2019
In addition to our SOC 2 Type II report, Secure Code Warrior is also certified against the ISO 27001 and ISO 27701 standards to further enhance our security and privacy posture.
Click the links below to view and validate our ISO certifications.
Our privacy team
Your personal data is important to us and we are committed to protecting it through close adherence to international regulations and industry best practice.
Our legal team
Our dedicated Legal team helps our business meet the needs of our customers by providing strategic advice on an increasingly complex, global and ever-changing regulatory landscape.