Prioritizing Your Security: Our Commitment to Data Protection
At FARISEC, security is our absolute highest priority. Therefore, we take a myriad of security measures to ensure the data of our customers and pentesters is secure and safe. In the spirit of openness and transparency, here are some of the security measures we take to protect and defend the FARISEC platform. Please contact a member of our team to learn more about our security measures.
SOC Type II
FARISEC and partners undergoes annual SOC 2 Type II audits to demonstrate the operating effectiveness of its security controls related to the Security, Availability, and Confidentiality of the Trust Services Criteria.
ISO 27001
FARISEC and partners are certified for ISO 27001, demonstrating that its ISMS is aligned with international security best practices. Robust processes and procedures for handling information assets showcase the company’s commitment to the highest level of internal compliance and security.
CREST
FARISEC and partners have earned the CREST Penetration Testing Service accreditation, awarded to organizations working with highly competent and professional pentesters, and maintaining robust processes for scoping, quality control, and customer data protection.
Emergency
In the event of a security breach, we have established procedures for decisive responses, including disabling access to the web application, performing mass password resets, and rotating certificates. If our platform is maliciously attacked, we will promptly and transparently communicate this information to all our users.
For secure communication our public PGP keys can be found here.