Snapshot 185777
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security at Replicated Visit our Trust Center Download our Security Whitepaper Secure Product Development Lifecycle Our Security Development Lifecycle (SDL) consists of a set of practices that support security assurance and compliance requirements. The framework helps developers build more secure software by reducing the number and severity of vulnerabilities. Security Framework We utilize frameworks for security controls to limit exposure to OWASP Top 10 security flaws. These include inherent controls that reduce our exposure to Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), and SQL Injection (SQLi), among others. Code Base Testing In addition to automated testing, our QA department reviews and tests our code base. Dedicated application engineers on staff identify, test, and triage security vulnerabilities in code. Analysis Tooling Our source code repositories are continuously scanned for security issues via our integrated static analysis tooling. Vulnerability Fixes Our application dependencies are continuously scanned for CVE information and remediated through automated pull requests when fixes are released. SBOMs Replicated components that run in your customers' environments ship with what a security team needs to check them. Embedded Cluster, the Replicated SDK, and Troubleshoot include signed SBOMs. Our container images, Embedded Cluster release files, and Troubleshoot CLIs also carry signed SLSA provenance, so anyone can confirm what they're running and where it was built using standard Sigstore tooling. 3rd Party Tested Bug Bounty Program We believe in responsible disclosure and support a community of ethical hackers with HackerOne Penetration Testing We contract with expert firms to evaluate the security of our products. Three of our core components are open source and can even check for yourself. Compliance Replicated is SOC 2 Type 2 compliant. Visit our Trust Center for security and compliance information. Security is of the utmost importance at Replicated. As part of our EnterpriseReady project, we included Security as one of the main tenets of enterprise software. For SaaS companies working with larger enterprise IT buyers, it is incredibly important for product security to be an area of strength. View the Guide Do you have a security concern you’d like to report? Input and feedback on our security, as well as responsible disclosure, is always appreciated. Replicated maintains a bug bounty program through HackerOne. For an invitation to submit reports for a bounty, please email security@replicated.com. We will provide bounties for relevant issues in accordance with the terms of our bug bounty program. Please act in good faith toward our users’ privacy and data during this process. Ethical researchers are always appreciated and we won’t take legal action against those offering security reports in good faith. If you would like, you can use our PGP key to securely communicate with us. Our PGP key can be downloaded from here. Our public key fingerprint is 7DE1 F885 2DB4 1E88 7A56 68A5 E682 0850 4F38 05FA. Our vulnerability patching policy is part of our product documentation. Security Advisories We publish advisories for Replicated components on GitHub and patch vulnerabilities on a published timeline. Vulnerability Patch Policy Replicated Security Whitepaper For a deeper look into Replicated’s security posture please read our published whitepaper. Security Whitepaper Shared Security Model for the Compatibility Matrix Better understand how security responsibilities are separated in the Compatibility Matrix. Shared Responsibility Model Company About UsBlogCareersSecurity Projects EnterpriseReadyGitHub Developers DocumentationAPI ReferenceCLI ReferenceCommunitySupport Find Us On Subscribe to our newsletter The latest news, articles, and resources, sent to your inbox. I agree to receive communications from Replicated. View our Privacy Policy. This site uses reCAPTCHA to fight spam. The Google Privacy Policy and Terms of Service apply. Thank you! You've been added to our monthly newsletter. Oops! Something went wrong while submitting the form. © 2025, Replicated, Inc. All Rights Reserved. TermsPrivacySecuritycontact@replicated.com(310) 800-1955