Snapshot 244983
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Hootsuite Search the Trust Center... Ctrl +K Quick links Hootsuite.com Report a Vulnerability ISO 27001 Certificate Quick links Hootsuite.com Report a Vulnerability ISO 27001 Certificate Our Philosophy Welcome to Hootsuite’s Trust Center! This is a centralized hub for all things related to security, privacy, compliance at Hootsuite. We want to make it easier for you to access the information you need to feel confident in how we protect your data and maintain compliance with global standards. Our approach to security and data privacy is built on industry best practices and is supported by a comprehensive set of internal controls, risk management processes, and ongoing assessments. To provide independent assurance of our security and privacy practices, we maintain multiple globally recognized certifications and undergo regular third-party audits — including SOC 2 Type II audits, ISO certifications (27001, 27701, and 27017), FedRAMP Authorization, and UK Cyber Essentials. To stay informed of updates to our security and privacy program, please click on the subscribe button at the top of this page. What's New 2026 ISO certificates now available! Announcements Oct 28, 2026, 16:44 UTC Update on Node2Shell / Brotli Vulnerability Hootsuite recently evaluated the Node2Shell / Brotli Decoder Vulnerability (CVE-2026-111497). Following a comprehensive security assessment, we can confirm that neither Hootsuite nor Lumen (by Talkwalker) are impacted by this issue. If you have any additional questions, please contact us at security@hootsuite.com. Oct 21, 2026, 20:12 UTC Update on PHP Remote Code Execution Vulnerabilities Hootsuite was recently made aware of two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could allow an unauthenticated attacker to run code remotely on web servers. Upon notification, our teams began assessing exposure and identified the PHP-based systems in scope. The necessary patches were deployed on October 21, 2026 to mitigate the vulnerabilities. Our review of the Hootsuite systems that do use PHP has not identified any evidence of exploitation or impact. Lumen (by Talkwalker) does not use PHP and is not affected by these vulnerabilities. We have completed all necessary checks and verified the integrity of our systems. No action is required from Hootsuite customers. If you have any questions, please reach out to security@hootsuite.com. Nov 29, 2025, 13:55 UTC Hootsuite update on Salesforce Gainsight breach Hootsuite was recently made aware of a security incident involving Salesforce/Gainsight which resulted in the compromise of authentication tokens for a subset of Gainsight customers. Upon notification, Hootsuite’s Security Team immediately revoked the affected integration token and launched a forensic investigation. Our review of system and access logs confirmed that although an unauthorized party attempted initial connectivity checks, no customer data, proprietary information, or sensitive records were accessed or exfiltrated. We have completed all necessary credential rotations and verified the integrity of our system. No action is required from Hootsuite customers at this time. If you have any questions, please reach out to security@hootsuite.com. Sep 27, 2025, 12:55 UTC Advisory: Fake GitHub Repositories Posing as Trusted Sources Hootsuite has identified a phishing campaign that uses fake GitHub repositories and Search Engine Optimization (SEO) manipulation to target macOS users and entice them to download malware. This activity is not the result of any compromise of Hootsuite systems, it arises from the fraudulent use of the Hootsuite name. Hootsuite is actively reporting these malicious repositories to GitHub and continues to monitor for similar threats. Users are advised to avoid interacting with or downloading content from unverified third-party links. Suspicious communications claiming to be from Hootsuite can be forwarded to security@hootsuite.com for verification. Sep 17, 2025, 12:55 UTC Hootsuite update on Salesforce-Drift breach Hootsuite was made aware of the Salesloft Drift breach which resulted in attackers stealing authentication tokens, and Salesforce data from certain Salesloft's customers. Following a thorough security review, Hootsuite determined that our systems, data, and customers are not affected by this incident. For any further questions, please reach out to security@hootsuite.com. Compliance CCPA CSA STAR 1 FedRAMP Li-SaaS GDPR PCI Trusted by Quick Summary One or more annual third-party audit(s) Annual third-party penetration testing Has a disaster recovery plan Subprocessors list available Has cyber insurance Will enter into a DPA Has a bug bounty or vulnerability disclosure program Deletes customer data on request Uses a centralized IAM solution (SSO) to manage employee access Has a status page Has a privacy policy Documents & Knowledge Base FAQs Featured Documents Powered by Conveyor, the first end-to-end customer trust platform. Learn more