Snapshot 66160
Normalized text
Scripts and page chrome removed; this is what change detection compares.
New CloudBees CI / Jenkins now builds from Cursor Origin Learn more CloudBees Trust Center Our commitment to security and privacy isn't just a statement - it's a practice. Explore our security practices below or begin your review. Start security review Trusted by teams delivering software at global scale Our commitment to security and privacy Both our products and our enterprise-level security controls undergo independent verification to help meet your security, privacy, and compliance objectives. Customer security ISO/IEC 27001:2022 CloudBees ISMS and CloudBees Unify are certified for information security management. ISO/IEC 27017:2015 Cloud-specific security controls for CloudBees Unify are independently certified and audited. ISO/IEC 27018:2025 Protects customer PII in CloudBees Unify through certified public cloud security controls. SOC 2 Type II Available for CloudBees Unify and Smart Tests. Cloud Security Alliance (CSA) STAR Listed on the CSA Security, Trust, Assurance, and Risk (STAR) Registry. NIST Cybersecurity Framework 2.0 Compliance demonstrated through independent third-party audits. Standardized Information Gathering (SIG) Products undergo routine SIG risk assessments to support customer security and compliance requirements. DORA Compliance Support Supporting financial services customers in meeting Digital Operational Resilience Act regulatory requirements. Privacy compliance Customer data is protected through compliance with industry-accepted privacy frameworks. CCPA Independent assessments verify compliance with the California Consumer Privacy Act. GDPR External audits verify data and privacy practices comply with the General Data Protection Regulation. Privacy policy CloudBees processes only essential data and maintains transparent practices. Review the privacy policy or contact privacy@cloudbees.com for more information. Product security Security is integrated throughout the CloudBees Software Development Lifecycle, supported by specialized resources and DevSecOps practices. Dedicated product security team Security engineers conduct rigorous security reviews and testing across all products, identifying and remediating vulnerabilities to maintain product integrity. Secure SDLC practices Products undergo continuous security assessment including automated vulnerability scanning and independent third-party penetration testing. Vulnerability management Regular internal and external security assessments ensure ongoing product security. View published security advisories or report vulnerabilities through our CloudBees HackerOne bug bounty program by contacting security@cloudbees.com. Jenkins security reporting The Jenkins open-source project maintains an independent security disclosure process. Security operations Enterprise-grade security monitoring and threat response capabilities protect CloudBees environments through continuous assessments and real-time detection across applications, infrastructure, and networks. Global security operations center Security analysts provide 24/7 monitoring and incident response, following documented incident response procedures for rapid communication and escalation. Threat detection and response Advanced SIEM and threat intelligence platforms enable automated detection and real-time investigation of security events, supported by continuous threat hunting and analysis. Vendor security management Third-party vendors undergo security assessments before gaining access to CloudBees systems or data, with ongoing monitoring to ensure continued compliance with security standards. Governance, risk and compliance CloudBees maintains current security policies through regular updates and reinforcement. The GRC team monitors compliance and assesses risk to ensure security measures meet industry standards. Employee security policies Comprehensive security policies cover critical topics, ensuring all employees and contractors with access to information assets understand their responsibilities. Security awareness & training Employees receive Security Awareness Training at hire and annually thereafter. Engineers access additional Secure Code Training. Security updates are communicated through email, newsletters, and internal channels. HR security Background checks on new employees follow local regulations and include criminal, education, and employment verification. All hires sign Non-Disclosure and Confidentiality agreements. Start your security review Access all attestations and documentation needed for procurement and compliance evaluation. Additional resources available upon request. Start security review