Snapshot 157124

Document
Security page
URL
https://security.infracost.io/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
86624 bytes
SHA-256 (raw)
0e60e6dd62b226ce1d73d85ae33222c4bf56ecfc2c6c271cdb54b07da946956b
SHA-256 (normalized text)
d6ba05f7edaf495d1a3ce190a17adf25222e1413820aa25d98988967cc2ca106

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Opens in new tab
|Infracost's Trust Center
Infracost
Infracost shifts cloud costs left and makes FinOps proactive. It sits in the engineering workflow and shows the cost impact of code changes before shipping to production. This catches costly mistakes before money has been spent. It also ensures all resources are tagged correctly and checks the code against FinOps policies, ensuring best practices are followed (e.g., GP2 volumes should be GP3, lifecycle policies).
Responsible disclosure: If you believe you have found a security vulnerability within Infracost, please let us know right away. We’ll try and fix the problem as soon as possible. Do not report vulnerabilities using public GitHub issues. Instead, email security@infracost.io with a detailed account of the issue. Please submit one issue per email, this helps us triage vulnerabilities.
hello@infracost.io
Privacy Policy
Compliance
SOC 2
GDPR
Resources
View all
Infracost Inc WCAG VPAT Report.pdf
Controls
Updated less than a minute ago
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 16 more Infrastructure security controls
Organizational security
Portable media encrypted
Anti-malware technology utilized
Code of Conduct acknowledged by contractors
View 4 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 27 more Internal security procedures controls
Data and privacy
Data retention procedures established
Data classification policy established
Subprocessors
View all
Amazon Web Services • Production infrastructure
US East
Infrastructure
Google Workspace • Workspaces including email
US
Emails, docs, calendar
Auth0 • Authentication of users
US
Authentication
Close • Customer Relationship Management
US
CRM
FAQ