Snapshot 257649
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Teleport Our customers trust Teleport to protect their critical infrastructure and help them reduce the blast radius of attacks. We back this trust with the following security commitmentsOpens in new tab: Proactive Detection - Publishing third-party security audits, conducting regular security vulnerability scanning, and running an active bug bounty program. Disclosure - Notifying customers of critical vulnerabilities that could affect them. Response - Triaging security issues rapidly and performing incident response as needed. Privacy - Protecting our customers' and partners' privacy. Compliance - Performing SOC 2 Type II, ISO 27001, PCI DSS, and HIPAA audits annually and maintaining legal commitments in our security addendum. Aleksandr Klizhentas, CTO & Co-Founder security@goteleport.com Privacy PolicyOpens in new tab Compliance SOC 2 Type II ISO 27001:2022 ISO 27701 CCPA GDPR HIPAA PCI-DSS 4.0 Resources View all Whitepapers Teleport SOC 2 Teleport - 2026 SOC 2 Type 2 + HIPAA Report.pdf Teleport SOC 2 Bridge Letters SOC 2 Bridge Letter - October 2026 Beams SOC 2 Beams - 2026 SOC 2 Type 2 Report.pdf ISO Certification Teleport ISO 27001 Certificate Teleport ISO 27001:2022 Statement of Applicability Teleport ISO 27701:2019 Statement of Applicability Teleport ISO 27701 Certificate PCI-DSS Teleport PCI DSS AOC Teleport PCI 4.0 Responsibilities Matrix Teleport Penetration Tests and Red Team Reports - Current Session Recording Summaries Red Team Q1 2026 Teleport Security Audit 2025 (Doyensec) HIPAA Teleport Infrastructure Identity Platform - HIPAA Certificate of Insurance Gravitational - COI - Evidence of Coverage (25-26) CAIQ STAR Teleport CAIQ STAR Security Questionnaire Privacy Documentation Gravitational Transfer Impact Assessement 221216.pdf Vulnerability Disclosure Vulnerability-Management-Policy.pdf Vulnerability-Disclosure-Policy.pdf CVE-2025-49825 IoC Instructions View 1 more Security and Availability Notifications Teleport Historic Penetration Tests and Red Team Reports Teleport Security Audit Q1 2024 (Include Security) Teleport Security Audit Q2 2023 (X41 D-Sec) View 11 more Teleport Historic Compliance Reports 2023 Teleport SOC 2 Type II Report.pdf 2024 Teleport SOC 2 Type II Report.pdf 2025 Teleport SOC 2 Type II Other resources Teleport-17-License-Scan.pdf Teleport Response to AI Threats.pdf Controls View all Product Security Penetration Testing Secure SDLC Session Management People Code of Conduct Workforce Security & Screening Security Awareness View 3 more People controls Security Operations Malware Protection Logging & Monitoring Incident Response View 2 more Security Operations controls Data and Privacy Cryptographic Protections Processor Obligations Retention & Deletion of Customer Data View 1 more Data and Privacy control Governance, Risk, and Compliance ISPMS Governance Legal & Regulatory Compliance Management Review View 8 more Governance, Risk, and Compliance controls Corporate Security Equipment Lifecycle Management Authentication & MFA Physical Security Typical data access Employee personally identifiable information Customer personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services (AWS) • Infrastructure Hosting United States Cloudflare • Content Delivery Network, DNS, DDoS Prevention United States Salesforce • CRM Software United States 6Sense • Account-based Marketing and Optimization United States Updates View all General Data Breach Disclosure - Notion - Nov 11 Published November 11, 2026 Nov 11 Notion Data Breach Disclosure Authors: Aleksandr Klizhentas, CTO Content Classification: Public Incident Summary On Nov 9, 2026 8:01PM PST Notion, a Teleport subprocessorOpens in new tab informed us of a data breachOpens in new tab impacting Teleport’s chat transcripts in the Notion AI app. This breach did not occur via Teleport’s own internal systems and processes. The breach does not involve Teleport’s software products. The Notion team shared impacted transcripts with the Teleport security team. We have reviewed the chat transcripts and identified mentions of some restricted information including links of internal Notion pages. All Teleport Notion pages are not accessible from the internet. While the internal Notion pages are not publicly accessible, the links reveal Teleport as the owner and therefore, can attribute the chat transcripts to Teleport’s Notion workspace. We have notified all impacted customers by emailing to their designated security contacts registered in Teleport’s portal on Nov 10. If you have not received a notification to a designated security contact, your company was not mentioned in the transcripts. You can verify the receipt and confirm status by emailing security@goteleport.com. Additionally, we have identified a leaked password for one of Teleport’s offices' guest WiFi networks and rotated it at 10:00PM PST Nov 9. Access to Teleport’s guest office WiFi is separate from Teleport’s employee WiFi networks. Access to any of Teleport’s WiFi networks does not grant any elevated privileges. Teleport does not use secrets and passwords for accessing production infrastructure. We have not identified any secrets, passwords or other credentials that can be used to access Teleport or our customers' production data and infrastructure. In the transcripts, aside from the office guest WIFI password, we have not identified any of Teleport’s or customer’s credentials or any references to specific customer data. Given this analysis, we classify the security risk from this breach to our customers as low at this time. We have taken immediate remediation actions: We have disabled all AI features of Notion pending further analysis. Rotated guest office’s WiFi password. For any future questions or references, please contact security@goteleport.com Thank you, Aleksandr Klizhentas, CTO and Co-Founder. Security Update on CVE-2026-98432 (Linux kernel use-after-free) Published October 31, 2026 Teleport is aware of CVE-2026-98432, the use-after-free vulnerability discovered by Anthropic in the Linux kernel. This vulnerability is not an issue with Teleport, it is an issue in the Linux kernel. Due to that, we are encouraging all customers to apply updates from their operating system vendor as the primary defense. We suggest prioritizing patching hosts that may be network ingress points where TCP connections are terminated as they are most susceptible to this attack. The best mitigation is applying operating system patches once they become available. Security Update on CVE-2026-111943 (eMudhra Intermediate CA Compromise) Published October 29, 2026 We investigated the impact of CVE-2026-111943 (eMudhra Intermediate CA CompromiseOpens in new tab) and prepared updated releases of Teleport (18.11.7 and 17.7.32). These releases were built with a patched Go version protected against CVE-2026-111943. While this vulnerability does not directly affect the Teleport CA, Teleport relies on TLS/HTTPS for intercomponent communication and integration with external services like SSO, leaving those integration points potentially vulnerable. We have fully patched all Cloud tenants (control plane, tools, and agents). We have also patched all ancillary components of the Teleport Cloud infrastructure. We are encouraging all customers to both apply updates from their operating system vendor that remove eMudhra from their trust store and to update to a patched version of Teleport that does not validate certificates that eMudhra issues. For self-hosted customers, we encourage you to update all Teleport services to Teleport 18.11.7 and 17.7.32 as soon as possible. Downloads can be obtained from your dashboard directly or through all package managers maintained by Teleport, including apt, yum, and helm. Users should back up the Teleport cluster, then follow the standard Teleport upgrade procedure. Compliance Beams Achieves SOC 2 Type II Published October 27, 2026 Teleport's latest product, Beams, has successfully completed its audit with Insight Assurance and received its SOC 2 Type II report covering the period from June 1 to August 31, 2026. This attestation report reflects Teleport's ongoing commitment to compliance and is now available under NDA at https://trust.goteleport.com/Opens in new tab. Beams launches for customers on November 9. Learn more at https://beams.run/Opens in new tab.