Secure Development
We follow OWASP Secure Coding Practices and use Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) during development.
Vulnerability Management
We monitor vulnerabilities using automated tools (e.g., Dependabot, Snyk). Our Security Bug Fix SLA defines:
- Critical vulnerabilities: Patched within one week of being reported
- Medium severity bugs: Patched within three weeks of being reported
Configuration Management
We maintain strict infrastructure-as-code principles. Our Kubernetes clusters and server configurations are managed via Git, providing an auditable and secure source of truth . We implement the principle of least privilege (POLP) and ensure separation of software between development and production environments.
Last updated: October 27, 2026