Trust & Security Center

Trust & Security is a Company Value at Uptime.com and a commitment to our customers.

Our Commitment

Uptime.com, LLC’s security & compliance principles guide how we deliver our products and services, enabling people to simply and securely access our service. This commitment extends into our software, system, vendors and our employees who are a critical part of our commitment.

Security lock icon Security

Security is at the center of everything we build and operate. View our commitment to keeping your data safe below.

Secure Personnel

Uptime.com, LLC takes the security of its data and that of its clients and customers seriously and ensures that only vetted personnel are given access to required resources.

All Uptime.com, LLC contractors and employees undergo background checks prior to being engaged or employed by us in accordance with local laws and industry best practices.

Confidentiality or other types of Non-Disclosure Agreements (NDAs) are signed by all employees, contractors, and others who have a need to access sensitive or internal information.

We embed the culture of security into our business by conducting employee security training & testing using current and emerging techniques and attack vectors.

Secure Development

All development projects at Uptime.com, LLC, including on-premises software products, support services, and our own service offerings follow secure development lifecycle principles.

All development of new products, tools, and services, and major changes to existing ones, undergo a design review to ensure security requirements are incorporated into proposed development.

All team members that are regularly involved in any system development undergo annual secure development training in coding or scripting languages that they work with as well as any other relevant training.

Software development is conducted in line with OWASP Top 10 recommendations for web application security.

Secure Testing

Uptime.com, LLC deploys third party penetration testing and vulnerability scanning of all production and Internet facing systems on a regular basis.

All new systems and services are scanned prior to being deployed to production.

We perform penetration testing both by internal security engineers and external penetration testing companies on new systems and products or major changes to existing systems, services, and products to ensure a comprehensive and real-world view of our products & environment from multiple perspectives.

We perform static and dynamic software application security testing of all code, including open source libraries, as part of our software development process.

Cloud Security

Uptime.com, LLC service provides maximum security with customer isolation in a modern cloud architecture following industry best practices. Uptime.com, LLC service leverages the native physical and network security features of cloud service providers and relies on the providers to maintain the infrastructure, services, and physical access policies and procedures.

All customer environments and data are segmented and isolated at a low level, to prevent any accidental cross-customer data access or malicious attacks.

All data is also encrypted at rest and in transmission to prevent any unauthorized access and prevent data breaches. Our entire platform is also continuously monitored by dedicated, highly trained Uptime.com, LLC experts.

We separate each customer's data and our own, utilizing industry best practices to ensure data is protected and isolated.

Client’s data protection complies with SOC 2 standards to encrypt data in transit and at rest, ensuring customer and company data and sensitive information is protected at all times.

We implement role-based access controls and the principles of least privileged access, and review revoke access as needed.

Vulnerability Remediation

At Uptime.com, LLC, we understand the critical importance of vulnerability management both for the smooth operation of our business and for the peace of mind of our valued customers. Our commitment to security is unyielding.

When vulnerabilities impact our systems and services, we act swiftly. The remediation actions, whether patching or alternative solutions, are meticulously executed within a timeframe that corresponds to the vulnerability's severity. However, this is always contingent on the public availability of a suitable patch or comprehensive remediation directives.

We maintain the trust placed in us by treating vulnerability management as a top priority. After all, ensuring our systems are robust and secure means that we can deliver seamless service to our customers, contributing to their success and ours.

Guidelines for Response Time based on Severity

  • For Critical issues: Response within 24 hours
  • For High severity: Response within a week
  • For Medium-level severity: Response within a month
  • For Low severity: Response within 3 months
  • For Informational purposes: Response as needed

When a vulnerability disclosure arrives with a severity rating, we typically use it as our initial guide. However, we reserve the right to adjust this rating upward or downward, using our expertise and best judgment.

Vulnerability Remediation

Uptime.com, LLC service provides maximum security with customer isolation in a modern cloud architecture following industry best practices. Uptime.com, LLC service leverages the native physical and network security features of cloud service providers and relies on the providers to maintain the infrastructure, services, and physical access policies and procedures.

All customer environments and data are segmented and isolated at a low level, to prevent any accidental cross-customer data access or malicious attacks.

All data is also encrypted at rest and in transmission to prevent any unauthorized access and prevent data breaches. Our entire platform is also continuously monitored by dedicated, highly trained Uptime.com, LLC experts.

We separate each customer's data and our own, utilizing industry best practices to ensure data is protected and isolated.

Client’s data protection complies with SOC 2 standards to encrypt data in transit and at rest, ensuring customer and company data and sensitive information is protected at all times.

We implement role-based access controls and the principles of least privileged access, and review revoke access as needed.

Privacy security-user.svg Privacy

We utilize best-in-class data protection and settings that protect your data and those of your organization's end users. Learn More about Uptime.com's Privacy Policy

Resiliency lovely.svg Resiliency

Organizations depend on Uptime.com monitoring for mission critical monitoring; that’s why we are committed to delivering the best service possible and keep our customers informed on our system availability. See our Status Page for the latest status on our services. Learn More about Uptime.com's Status monitoring

Compliance flag.svg Compliance

Uptime.com, LLC is committed to providing secure products and services to safely and easily manage thousands of customers across the globe. Our external certifications provide independent assurance of Uptime.com, LLC’s dedication to protecting our customers by regularly assessing and validating the protections and effective security practices Uptime.com, LLC has in place.

SOC 2 Type 2

Uptime.com, LLC successfully completed the AICPA Service Organization Control (SOC) 2 Type II audit. The audit confirms that Uptime.com, LLC’s information security practices, policies, procedures, and operations meet the SOC 2 standards for security. An unqualified opinion on a SOC 2 Type II audit report demonstrates to the Uptime.com, LLC’s current and future customers that they manage their data with the highest standard of security and compliance.