Trust & Security Center

Secure Development

All development projects at Uptime.com, LLC, including on-premises software products, support services, and our own service offerings follow secure development lifecycle principles.

All development of new products, tools, and services, and major changes to existing ones, undergo a design review to ensure security requirements are incorporated into proposed development.

All team members that are regularly involved in any system development undergo annual secure development training in coding or scripting languages that they work with as well as any other relevant training.

Software development is conducted in line with OWASP Top 10 recommendations for web application security.

Secure Testing

Uptime.com, LLC deploys third party penetration testing and vulnerability scanning of all production and Internet facing systems on a regular basis.

All new systems and services are scanned prior to being deployed to production.

We perform penetration testing both by internal security engineers and external penetration testing companies on new systems and products or major changes to existing systems, services, and products to ensure a comprehensive and real-world view of our products & environment from multiple perspectives.

We perform static and dynamic software application security testing of all code, including open source libraries, as part of our software development process.

Cloud Security

Uptime.com, LLC service provides maximum security with customer isolation in a modern cloud architecture following industry best practices. Uptime.com, LLC service leverages the native physical and network security features of cloud service providers and relies on the providers to maintain the infrastructure, services, and physical access policies and procedures.

All customer environments and data are segmented and isolated at a low level, to prevent any accidental cross-customer data access or malicious attacks.

All data is also encrypted at rest and in transmission to prevent any unauthorized access and prevent data breaches. Our entire platform is also continuously monitored by dedicated, highly trained Uptime.com, LLC experts.

We separate each customer's data and our own, utilizing industry best practices to ensure data is protected and isolated.

Client’s data protection complies with SOC 2 standards to encrypt data in transit and at rest, ensuring customer and company data and sensitive information is protected at all times.

We implement role-based access controls and the principles of least privileged access, and review revoke access as needed.

Vulnerability Remediation

At Uptime.com, LLC, we understand the critical importance of vulnerability management both for the smooth operation of our business and for the peace of mind of our valued customers. Our commitment to security is unyielding.

When vulnerabilities impact our systems and services, we act swiftly. The remediation actions, whether patching or alternative solutions, are meticulously executed within a timeframe that corresponds to the vulnerability's severity. However, this is always contingent on the public availability of a suitable patch or comprehensive remediation directives.

We maintain the trust placed in us by treating vulnerability management as a top priority. After all, ensuring our systems are robust and secure means that we can deliver seamless service to our customers, contributing to their success and ours.

Guidelines for Response Time based on Severity

• For Critical issues: Response within 24 hours
• For High severity: Response within a week
• For Medium-level severity: Response within a month
• For Low severity: Response within 3 months
• For Informational purposes: Response as needed

When a vulnerability disclosure arrives with a severity rating, we typically use it as our initial guide. However, we reserve the right to adjust this rating upward or downward, using our expertise and best judgment.

Vulnerability Remediation

Uptime.com, LLC service provides maximum security with customer isolation in a modern cloud architecture following industry best practices. Uptime.com, LLC service leverages the native physical and network security features of cloud service providers and relies on the providers to maintain the infrastructure, services, and physical access policies and procedures.

All customer environments and data are segmented and isolated at a low level, to prevent any accidental cross-customer data access or malicious attacks.

All data is also encrypted at rest and in transmission to prevent any unauthorized access and prevent data breaches. Our entire platform is also continuously monitored by dedicated, highly trained Uptime.com, LLC experts.

We separate each customer's data and our own, utilizing industry best practices to ensure data is protected and isolated.

Client’s data protection complies with SOC 2 standards to encrypt data in transit and at rest, ensuring customer and company data and sensitive information is protected at all times.

We implement role-based access controls and the principles of least privileged access, and review revoke access as needed.