We take the security of your infrastructure data seriously. Here is what we do to keep it safe.
All traffic between your browser, our API, and our monitoring agents is encrypted with TLS 1.2 or higher. We enforce HSTS and redirect all plain HTTP.
Passwords are hashed with bcrypt at cost factor 12. We never store or log plaintext passwords.
Production databases are not publicly accessible. Access is restricted to named engineers via MFA-gated SSH tunnels. Connection credentials rotate automatically.
We use automated tooling to scan for known CVEs in our dependencies and apply patches within 48 hours for critical vulnerabilities.
We use Ezmon to monitor Ezmon. Uptime and incident history is visible on our public status page.