Our approach
Security and privacy our way
SCW'S Trust Centre is currently unavailable. For all enquiries/requests for security documentation, please contact security@securecodewarrior.com.
We apologise for any inconvenience.
Data security & privacy
Learn more about how we safeguard our information assets, and those of our customers, against misuse, abuse or compromise.
这是 div 块中的一些文本。
Tools
How we secure our products
Cloud security & best practices
Our services are hosted on Amazon Web Services infrastructure and we use MongoDB Atlas for storage. We leverage their world-class data centers in the US and EU to protect information and meet core security and compliance requirements. More information about their security practices is available at: AWS Security & MongoDB Security
Training and awareness
As part of our initial onboarding process, as well as on an ongoing basis (at least annually), all staff receive training regarding their respective information security/privacy obligations. In addition. our engineers perform secure code training on the OWASP Top 10
Vulnerability management
We continuously monitor for malicious activity, and regularly scan our infrastructure, applications and third-party libraries for known vulnerabilities. All our products go through a series of peer reviews and security assessments prior to deployment, including third-party library scanning, static code analysis and static container analysis. We also regularly engage expert third-parties to perform penetration tests in addition to our internal testing and scanning programs.
Access and authentication
We support single sign-on (SSO) so you can implement your own authentication systems to control access to our platform. Within Secure Code Warrior, we implement least privilege principles and access to production data is restricted through security groups and limited to staff that strictly need it for support. We also use multi-factor authentication (MFA) and ephemeral credentials to strictly control access to production systems
Our security program
Your personal data is important to us and we are committed to protecting it through close adherence to international regulations and industry best practice.
安全认证证书书本和文档
AICPA SOC 2 类型 2
我们知道你正在使用我们的产品时机将机密信息委托给安全代码勇士。为此，我们非常重视您的数据的保护和保密性。我们不断追求最高的技术标志、组织结构和行业公认的最佳实践，以免所有客户都对安全代码勇士充满信任和信心。
为了证明我们的承诺，安全代码勇士已成功获得其SOC 2 II类报告，这表明我们已采取适当的控制措施来降低低与安全性、可用性和机密性相关的内容。SOC 2 报告令人满意的情况需要保证 SaaS 供应商（例如安全代码勇士）控制有效性客户的需求需求。该报告是经认证的独立第三方公司进行审计的结果 美国注册会计师协会 (AICPA)。
这些审计是估计软件供应商数据安全和隐私的行业标志。我们的二类审计是最可靠的审计类型，因为我们在一段时间内采取了持续的控制措施，表现出来可靠和一致的保激施来保护客户的数据。如果您对我们的 SOC 2 报告感兴趣，请联系您的客户或发送电子邮件至我们的支持团队团队团队- support@securecodewarrior.com。
ISO 27001:2013 /ISO 27701:2019
除了我们的 SOC 2 III 类报告之外，Secure Code Warrior还通过了 ISO 27001 和 ISO 27701 标准的认证，以进一步增强我们的安全和隐私状况。
点击下方的链接我查看并验证我们的 ISO 认证证书。