Snapshot 255167
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Monitored and Powered by Security Portal hydrahost.com Compliance overview Current compliance status across frameworks SOC 2 Type 2 Compliant GDPR In progress Featured documents Key security and compliance documentation Hydra Host Inc. SOC2 Type 2 Service Auditor Report Request access Q4 2025 Hydra Host Pentest Request access View all documents Compliance Program An overview of security controls in place Access Control and Authorization Access granting process used Access management policy established Access requests to sensitive data required Access requests to sensitive infrastructure required Account inventory maintained Dormant accounts disabled Employee access regularly reviewed MFA required for administrative access MFA required for applications MFA required for critical services MFA required for infrastructure access Password management policy enforced Password management policy established Data Management and Protection Data encrypted at rest Data encrypted in-transit Data inventory maintained Data management and retention policy established Disaster Recovery Automated backups enabled Business continuity and disaster recovery policy established Data backup and recovery policy established Data recovery process established Disaster recovery plans tested Recovery data isolated Email Security DMARC policy and verification used Email account access restricted Email settings block malicious content Endpoint Security Data encrypted on end-user devices Firewall maintained on end-user devices Mobile device management (MDM) used Software inventory on end-user devices maintained Infrastructure Security Active discovery tools used Administrator access restricted Automated security scanning performed on infrastructure Buckets not exposed publicly Configuration management system established High availability infrastructure used Infrastructure changes logged Infrastructure changes require review Infrastructure deployed using an infrastructure-as-code tool Key management policy established Unauthorized assets addressed and removed VPN used Monitoring and Incident Response Audit log management process maintained Incident response policy established Incident review process implemented Infrastructure performance monitored Network infrastructure monitored Organizational Security Acceptable use policy established Asset inventory maintained Asset management policy established Change management policy established Code of conduct established Company security commitments externally communicated Data-flow diagrams maintained Employee background checks performed External support resources available (i.e., documentation) Human resource security policy established Information security policy established Offboarding process established Onboarding process established Password manager used Performance evaluations conducted Physical access restricted Physical security policy established Policies signed by relevant personnel Roles and responsibilities specified Security official assigned Service description communicated Software development lifecycle established System changes externally communicated System changes internally communicated Risk Management Risk management policy established Vendor inventory maintained Vendor management policy established Vendor management program established Vulnerability Management Automated software patch management performed Penetration testing findings remediated Vulnerabilities scanned Vulnerability management policy established