Technical Security

  • Secure
  • Protect
  • Control
  • Secure Dev
  • Bug Bounty Program
  • Regular Pentest

technical-security

Secure - secured by default 🔗

  • Secure Code
  • Data Center Redundancy
  • Network Redundancy
  • Power-Supply Redundancy

secure

Protect - protected by default 🔗

  • Instances and Security Groups are closed by default
  • Databases fully encrypted and filtered by default
  • Secured Access Control Lists on all storage buckets
  • Included DDOS Protection of the network

protect

Control - fine-grained access control 🔗

  • Role-Based Access Control to Exoscale organizations
  • Two-Factor Authentication supported
  • Optional SSO configuration
  • Full IAM for all API calls
  • Audit Trail for all events

control

Secure Dev - world-class engineering 🔗

  • Code Review
  • Change Management
  • Secure Development Practices

secure-dev

Bug Bounty Program - crowdfunded security 🔗

  • Competitive Bounties
  • 300 active Researchers taking part in the program
  • Bugcrowd a crowdsourced security platform. It is one of the internet’s largest bug bounty and vulnerability disclosure companies.

bug-bounty

Regular Pentest - timeboxed assessments 🔗

  • Annual Pentest
  • Performed by Third Parties
  • Full Product Coverage

regular-pentest