Snapshot 154329
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review Overview Rootly has implemented best-in-class security practices to keep customer data safe and operates in the most regulated markets. 100s of global organizations from fast growing startups to F500 trust Rootly to be their incident management solution of choice. Contact: security@rootly.com Compliance CCPA GDPR SOC 2 Rootly is reviewed and trusted by Cisco Canva Grammarly Wealthsimple Faire Poshmark Shell Cypress.io Rivian Squarespace NVIDIA Documents Featured Documents REPORTSPentest Report REPORTSSOC 2 Report Product Security Audit Logging Data Security Integrations View more Reports Pentest Report SOC 2 Report Vulnerability Assessment Report Data Security Access Monitoring Data Backups Data Erasure View more App Security Responsible Disclosure Code Analysis Credential Management View more Legal Cyber Insurance Data Processing Agreement Master Services Agreement View more Access Control Data Access Logging Password Security Infrastructure Amazon Web Services Anti-DDoS BC/DR View more Endpoint Security Disk Encryption Endpoint Detection & Response Mobile Device Management Network Security Data Loss Prevention Security Information and Event Management Zero Trust Corporate Security Email Protection Employee Training Incident Response View more Policies Acceptable Use Policy Access Control Policy Asset Management Policy View more Trust Center Updates NPM Supply Chain Attack Incidents After careful review of our infrastructure and npm dependencies, the Rootly team has determined that we are not currently impacted by the recent NPM supply chain attack disclosed on September 8, 2025, which compromised several widely used packages (e.g., debug, chalk). For reference, please see the advisory. We will continue to monitor for any updates and ensure our systems remain secure. CVE-2024-3094 Vulnerabilities After careful review of our infrastructure and SBOM, the Rootly team has determined that we are not currently vulnerable to the xz Vulnerability CVE-2024-3094 that were disclosed on March 29th, 2024. CVE-2023-34362 Vulnerabilities After careful review of our infrastructure and SBOM, the Rootly team has determined that we are not currently vulnerable to the MOVEit Transfer Critical Vulnerability CVE-2023-34362 that were disclosed on June 16th, 2023. CVE-2022-3602 & CVE-2022-3786 Incidents After careful review of our infrastructure and SBOM, the Rootly team has determined that we are not currently vulnerable to the OpenSSL 3 vulnerabilities CVE-2022-3602 and CVE-2022-3786 that were disclosed on November 1, 2022. CVE-2022-21449 Incidents None of our services are running Java 15, 17, and 18 so this vulnerability (CVE-2022-21449) is not exploitable on our side. If you need help using this Trust Center, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue