Third Party Index

Snapshot 34163

Document
Security page
URL
https://termius.com/security
Fetched
HTTP status
200
Content type
text/html
Fetch mode
static
Size
594558 bytes
SHA-256 (raw)
ec44ca40fc258943311a0d59e517501894addec267b93776607779019b3b5a93
SHA-256 (normalized text)
cac37a3f9c095f341a19d5b0581e2fda9c868dfdf12f0f144a6fc95a9698f5d8

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Product
Security
Pricing
Enterprise
Log in
Sign up
Product
Security
Pricing
Enterprise
Log in
Sign up
Enterprise-grade security
Enterprise-grade security
Termius is designed like a password manager to protect your data privacy. Only you can access your information in the encrypted vaults and hold the key to decrypt it.
Take an in-depth look into our security
Request our internal policies, SOC 2, or pentest reports.
Evaluate Termius security
Evaluate Termius security
We ensure the availability of our systems
90 days ago
90 days ago
99.99% uptime
99.99% uptime
Today
Today
According to our status page.
Data security and privacy
Account protection
Account protection
Data encryption
Data encryption
Data retention and removal
Data retention and removal
Payment information
Payment information
Account protection
2-factor authentication
We provide a 2-factor authentication mechanism to protect our users from account takeover attacks.
Account takeover protection
We protect our users against data breaches by monitoring and blocking brute-force attacks.
Account protection
2-factor authentication
We provide a 2-factor authentication mechanism to protect our users from account takeover attacks.
Account takeover protection
We protect our users against data breaches by monitoring and blocking brute-force attacks.
Data encryption
Instant access
on any platform
Encryption in transit
All data sent to or from our infrastructure is encrypted in transit using industry-standard Transport Layer Security (TLS 1.2). You can view our SSLLabs report here for termius.com, api.termius.com, and account.termius.com.
Encryption at rest
All of our users' data (including passwords) is encrypted in the database using battle-tested encryption algorithms. In addition, our users' synchronized data is encrypted using end-to-end encryption.
Data retention and removal
Instant access
on any platform
We offer customers the option to delete their data at the end of their subscription. All data is then completely removed from the dashboard and server. Users can request the removal of usage data through the account page or by contacting support.
Read more about our privacy policy at https://termius.com/privacy-policy.
Payment information
All payment processing is securely outsourced to Stripe, a PCI Level 1 certified service provider. We do not collect any payment information and are therefore not subject to PCI obligations.
App and database security
System uptime
System uptime
App security monitoring
App security monitoring
App security protection
App security protection
Infrastructure
Infrastructure
Network-level security
Network-level security
DDoS protection
DDoS protection
System uptime
Instant access
on any platform
Our systems have 99.99% uptime according to our status page.
App security monitoring
Instant access
on any platform
We collect and store logs to provide an audit trail of our application activity.
We use technology to monitor exceptions and logs and to detect application anomalies.
We use a security monitoring solution to monitor our application security, detect attacks, and respond quickly to a data breach.
App security protection
Instant access
on any platform
We use security headers to protect our users from attacks. You can check our grade on this security scanner for termius.com, api.termius.com, and account.termius.com.
We use security automation capabilities that automatically detect and respond to threats targeting our apps.
Infrastructure
Instant access
on any platform
All of our services run in the cloud. We don't host or operate our routers, load balancers, DNS servers, or physical servers. Our service is based on Amazon Web Services. They provide strong security measures to protect our infrastructure and comply with most certifications. You can read more about their practices here.
Network-level security
Instant access
on any platform
Our network security architecture consists of multiple security zones. We monitor and protect our network to ensure that unauthorized access does not occur using:
A virtual private cloud (VPC), a bastion host, or VPN with network access control lists (ACLs) and no public IP addresses.
A firewall that monitors and controls inbound and outbound network traffic.
IP address filtering.
DDoS protection
Instant access
on any platform
We use Distributed Denial of Service (DDoS) mitigation services powered by an industry-leading solution.
Internal policies and training
Dedicated Security Team
Dedicated Security Team
Business continuity
Business continuity
Secure development
Secure development
Dedicated Security Team
Our security team consists of security professionals dedicated to improving the security of our organization. Our employees are trained to respond to security incidents and are available 24/7.
Business continuity
We back up all of our critical assets and regularly attempt to restore the backup to ensure rapid recovery during a disaster. All of our backups are encrypted.
Secure development
Instant access
on any platform
We adhere to security best practices and frameworks (OWASP Top 10, SANS Top 25). We use the following best practices to ensure the highest level of protection in our software:
Developers participate in regular security training to learn about common vulnerabilities and threats.
We review our code for security vulnerabilities.
We regularly update our dependencies and make sure none of them has known vulnerabilities.
We use Static Application Security Testing (SAST) to detect basic security vulnerabilities in our codebase.
We rely on yearly third-party security experts to perform penetration tests of our applications.
Start security evaluation
Explore Termius security solutions and policies on your own.
Evaluate Termius security
Start security evaluation
Explore Termius security solutions and policies on your own.
Evaluate Termius security
Start security evaluation
Explore Termius security solutions and policies on your own.
Evaluate Termius security
SSH client for
iPad
iPhone
Android
macOS
Windows
Linux
Product
Download
Gloria Ops ↗
SSH ID Passkeys ↗
Vault
Resources
Education
For Open Source
Beta Program 🚀
Documentation
Customer Support
Feature Requests
Security
System Status
Trust center
Security
Changelog
Company
About Us
Blog
Careers
Brand Resources
Ⓒ 2026 Termius Corporation. All rights reserved
Terms of Use
Privacy Policy
Responsible Disclosure
SSH client for
iPad
iPhone
Android
macOS
Windows
Linux
Product
Download
Gloria Ops ↗
SSH ID Passkeys ↗
Vault
Resources
Education
For Open Source
Beta Program 🚀
Documentation
Customer Support
Feature Requests
Security
System Status
Trust center
Security
Changelog
Company
About Us
Blog
Careers
Brand Resources
Terms of Use
Privacy Policy
Responsible Disclosure
Ⓒ 2026 Termius Corporation. All rights reserved
SSH client for
iPad
iPhone
Android
macOS
Windows
Linux
Product
Download
Gloria Ops ↗
SSH ID Passkeys ↗
Vault
Resources
Education
For Open Source
Beta Program 🚀
Documentation
Customer Support
Feature Requests
Security
System Status
Trust center
Security
Changelog
Company
About Us
Blog
Careers
Brand Resources
Ⓒ 2026 Termius Corporation. All rights reserved
Terms of Use
Privacy Policy
Responsible Disclosure