Snapshot 13817
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Teleport Our customers trust Teleport to protect their critical infrastructure and help them reduce the blast radius of attacks. We back this trust with the following security commitmentsOpens in new tab: Proactive Detection - Publishing third-party security audits, conducting regular security vulnerability scanning, and running an active bug bounty program. Disclosure - Notifying customers of critical vulnerabilities that could affect them. Response - Triaging security issues rapidly and performing incident response as needed. Privacy - Protecting our customers' and partners' privacy. Compliance - Performing SOC 2 Type II, ISO 27001, PCI DSS, and HIPAA audits annually and maintaining legal commitments in our security addendum. Aleksandr Klizhentas, CTO & Co-Founder security@goteleport.com Privacy PolicyOpens in new tab Compliance SOC 2 Type II ISO 27001:2022 ISO 27701 CCPA GDPR HIPAA PCI-DSS 4.0 Resources View all Whitepapers SOC 2 Teleport - 2026 SOC 2 Type 2 + HIPAA Report.pdf ISO Certification Teleport ISO 27001 Certificate Teleport ISO 27001:2022 Statement of Applicability Teleport ISO 27701:2019 Statement of Applicability Teleport ISO 27701 Certificate PCI-DSS Teleport PCI DSS AOC Teleport PCI 4.0 Responsibilities Matrix Penetration Tests and Red Team Reports - Current Session Recording Summaries Red Team Q1 2026 Teleport Security Audit 2025 (Doyensec) HIPAA Teleport Infrastructure Identity Platform - HIPAA Certificate of Insurance Gravitational - COI - Evidence of Coverage (25-26) CAIQ STAR Teleport CAIQ STAR Security Questionnaire Privacy Documentation Gravitational Transfer Impact Assessement 221216.pdf Vulnerability Disclosure Vulnerability-Management-Policy.pdf Vulnerability-Disclosure-Policy.pdf CVE-2025-49825 IoC Instructions View 1 more Security and Availability Notifications Historic Penetration Tests and Red Team Reports Teleport Security Audit Q1 2024 (Include Security) Teleport Security Audit Q2 2023 (X41 D-Sec) View 11 more Historic Compliance Reports 2023 Teleport SOC 2 Type II Report.pdf 2024 Teleport SOC 2 Type II Report.pdf 2025 Teleport SOC 2 Type II Other resources Teleport-17-License-Scan.pdf Teleport Response to AI Threats.pdf Controls View all Product Security Penetration Testing Network Security & Segmentation Secure SDLC View 1 more Product Security control People Code of Conduct Workforce Security & Screening Security Awareness View 3 more People controls Security Operations Malware Protection Logging & Monitoring Incident Response View 2 more Security Operations controls Data and Privacy Cryptographic Protections Processor Obligations Retention & Deletion of Customer Data View 2 more Data and Privacy controls Governance, Risk, and Compliance Legal & Regulatory Compliance Management Review Internal Audit Program View 7 more Governance, Risk, and Compliance controls Corporate Security Equipment Lifecycle Management Identity & Access Management Authentication & MFA View 1 more Corporate Security control Typical data access Employee personally identifiable information Customer personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services (AWS) • Infrastructure Hosting United States Cloudflare • Content Delivery Network, DNS, DDoS Prevention United States Salesforce • CRM Software United States 6Sense • Account-based Marketing and Optimization United States Updates View all Compliance Update on 2026 Compliance Reports and Attestations Published July 10, 2026 Teleport has successfully completed its 2026 audit cycle with Insight Assurance and Johanson Group. These audits, covering PCI-DSS, SOC 2 Type II, HIPAA, ISO 27001, and ISO 27701, continue Teleport's history of maintaining a robust compliance profile. The signed reports and certificates are available to customers and verified prospects in our Trust Center. Security Update on CVE-2026-31431 (Copy Fail) Published April 30, 2026 Teleport has completed an investigation into the impact of the Linux kernel vulnerability CVE-2026-31431 (“Copy Fail”) on Teleport Cloud. We have found no exploitable attack surface in our production environment. We are hardening our infrastructure by disabling the algif_aead kernel module where appropriate. We will apply official patches when they are made available for the Linux distributions used in our cloud platform. We encourage Teleport users to review the impact of this Linux kernel vulnerability on their own infrastructure, as it can be used to escalate privileges on affected operating systems. Note that Teleport does not prevent such an exploit after an authorized SSH connection has been established. Teleport’s Session Recording feature can be used to audit SSH sessions for evidence of exploitation attempts. References: https://copy.fail/Opens in new tab https://goteleport.com/docs/reference/architecture/session-recording/Opens in new tab Security Update on LiteLLM and Trivy Supply Chain Incidents Published March 24, 2026 Recent supply chain attacks have compromised the LiteLLM Python package (versions 1.82.7 and 1.82.8) and the Trivy package (version 0.69.4), embedding malicious code designed to steal credentials from affected systems. Teleport has investigated both incidents for impact on our systems and infrastructure, and has concluded that we have not been impacted. Teleport uses Socket to monitor our software supply chain on an ongoing basis, with a specific focus on supply chain attacks like these. We also use Project Discovery Cloud and Wiz for ongoing scanning and monitoring of our platform and web properties. Security Update on Shai Hulud NPM Malware Attacks Published December 29, 2025 A wide range of NPM packages have been compromised in the past few months with malware attacks using similar, but varied techniques. This group of attacks is being referred to as "Shai Hulud". Teleport has investigated all currently known compromised packages for impact on our systems, and has concluded that we have not been impacted at this time. Teleport uses Socket to monitor our software supply chain on an ongoing basis, with a specific focus on malware attacks like Shai Hulud. We also use Project Discovery Cloud and Wiz for ongoing scanning and monitoring of our platform and web properties.