Snapshot 96993
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Documentation Contact our support team Security at Installatron Security overview Deployment and infrastructure Vulnerability and update management Vulnerability disclosure and incident reporting Shared security responsibilities Security at Installatron Security is a core consideration in how Installatron products are developed, maintained, and operated. This security portal covers Installatron Plugin, Installatron Server, and Installatron Remote unless otherwise noted. Because Installatron supports both customer-managed and Installatron-managed deployments, the applicable security boundary and division of responsibility depend on the product and deployment model in use. Our approach to product security Security considerations are incorporated throughout the design, implementation, testing, and release of Installatron products. Wherever possible, Installatron applies secure defaults and gives additional attention to code involving authentication, authorization, credential handling, privileged operations, filesystem changes, and network communication. Installatron's development process combines code review, continuous integration testing, static analysis, secret scanning, and dependency scanning to help identify defects, exposed credentials, and known vulnerabilities before release. Installatron's source code has also been audited by Cure53, an independent security firm. This external assessment complements the security review and testing performed throughout development. Deployment models Installatron Plugin and self-hosted Installatron Server operate within infrastructure managed by the customer or hosting provider. Cloud-hosted Installatron Server and Installatron Remote include components hosted and managed by Installatron. These differences determine where customer data is processed and how security responsibilities are divided. See Deployment and infrastructure for product-specific boundaries. Vulnerability and update management Installatron monitors for known security vulnerabilities affecting supported applications and provides update controls, notifications, and event logging. Critical upstream application updates are tested and published within hours of release by the application vendor, including releases made on non-business days. Applications installed through Installatron are supplied by independent software vendors. Installatron cannot guarantee the security or code quality of third-party applications, and customers should apply updates promptly and follow the security guidance provided by application vendors. See Vulnerability and update management for more information. Shared responsibility Security is shared between Installatron, customers, hosting providers, and application vendors. Installatron is responsible for the products and hosted services under its control. Customers and hosting providers remain responsible for the infrastructure, access controls, credentials, configuration, backups, and update policies under their control. See Shared security responsibilities for more information. Reporting security concerns Suspected vulnerabilities affecting an Installatron product or Installatron-hosted service can be reported privately to [email protected]. Account-specific concerns and suspected incidents involving customer data should be reported through Installatron Support. Was this page helpful? Need help? Contact Support Check out What's New Questions? Contact Sales index