Snapshot 10914
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Paessler Trust Center Security, compliance, and transparency — all in one place. We are committed to protecting your data and meeting the highest industry standards. Explore our certifications, reports, and security practices. Report a Security Incident View All Certifications Certifications & Audit Reports Download our latest audit reports and certifications. Some documents require a brief form submission to ensure proper handling of sensitive information. SOC 2 Type II Report Our SOC 2 Type II audit verifies that Paessler's controls meet rigorous standards for security, availability, and confidentiality over a sustained period. Request REPORT ISO 27001 Certification SO 27001 is the international standard for information security management systems (ISMS). Our certification demonstrates systematic risk management and continuous improvement. Download Certificate ISO 9001 Certification ISO 9001 certification demonstrates our commitment to quality management excellence. Our processes are designed to consistently deliver high-quality products and services while continuously improving. Download Certificate GDPR Compliance Paessler complies with the EU General Data Protection Regulation (GDPR), ensuring that your data is processed lawfully, transparently, and securely. Learn More Your Data, Your Control Data privacy isn't just a legal requirement. It's foundational to how we build and operate our products. Here's how we protect your information: Encryption at Rest and in Transit We use industry-standard encryption protocols (TLS 1.2+) to protect data during transmission, and encrypt sensitive data at rest. Role-Based Access Control Granular permissions ensure that only authorized users can access monitoring data and configuration settings. Data Residency Options Host PRTG on-premises or choose cloud regions that meet your compliance and data residency requirements. No Unnecessary Data Collection We collect only the data necessary to deliver our services. You retain full control over what gets monitored and how data is stored. Regular Security Audits Our infrastructure and processes are audited annually by independent third parties to ensure ongoing compliance. Security Leadership Jay Miller, MBA, MSIT, CISSP Chief Information Security Officer Jay Miller leads Paessler's cybersecurity strategy and compliance program as Chief Information Security Officer. With extensive experience in security operations, risk management, and team leadership, he oversees the company's information security management system (ISMS) and drives continuous improvement of our security posture. Vulnerability Disclosure Program Paessler has a Vulnerability Disclosure Program (VDP) to review questions related to product vulnerabilities. If you have a potential vulnerability or bug to disclose to Paessler, or you have security questions related to our products, please contact us. How do I report a vulnerability? Please send an email to [email protected] What happens after I submit a query? A Technical Support representative will get in touch with you very quickly to discuss your question or finding. We will also validate your finding and provide feedback, working with you to ensure responsible and transparent disclosure. What if I receive no response? Please send a notification email without encryption to ensure successful receipt to our team. Do you have a bug bounty program? Paessler does not have a bug bounty program and does not pay a bug bounty for submissions. Trusted by 300,000+ users monitoring mission-critical systems worldwide. Frequently Asked Questions What is SOC 2 Type II, and why does it matter? SOC 2 Type II is an audit framework developed by the American Institute of CPAs (AICPA) that evaluates a service provider's controls for security, availability, and confidentiality over a sustained period (typically 6-12 months). It provides assurance to customers that our security controls are not only designed effectively but also operate effectively over time. Can I get a copy of your SOC 2 report? Yes. Due to the sensitive nature of the report, we require a brief information request form. Once submitted, we'll send you the latest report via email or secure link. Is PRTG GDPR-compliant? Yes. Paessler complies with GDPR requirements. PRTG can be deployed on-premises (giving you full data control) or in cloud environments that meet GDPR data residency and processing standards. We also provide Data Processing Agreements (DPAs) upon request. How often are your certifications audited? Our SOC 2 and ISO 27001 certifications are audited annually by independent third-party auditors. Do you have a Bug Bounty program? We currently operate a coordinated Vulnerability Disclosure Program (VDP). Researchers can report security issues to [email protected]. We're evaluating a formal bug bounty program for the future. Where is my monitoring data stored? If you're using PRTG on-premises, your data stays on your infrastructure. If you're using Paessler's cloud offerings, you can choose data center regions to meet your compliance and residency requirements. How do you handle security incidents? We have a documented Incident Response Plan that includes detection, containment, investigation, remediation, and communication protocols. In the event of a security incident affecting customer data, we will notify affected customers promptly in accordance with legal and contractual obligations. Can I request a custom security questionnaire or compliance documentation? Yes. Please contact our Sales or Security team at [email protected], and we'll work with you to provide the documentation you need. Security & Compliance Updates Stay informed about our latest certifications, audits, and security improvements. Latest Blog Articles about Security in PRTG How Paessler's SOC 2 Type 2 and ISO 27001 Certifications Simplify Your Compliance and Procurement Your network security in real time with PRTG Network Attack Monitoring Data Breach Monitoring And more... Have Questions About Our Security Practices? Our Security and Compliance team is here to help with custom documentation requests, security questionnaires, or compliance discussions. Contact Security Team