Security First

Security Policy

Last updated: January 2025

Security is core to everything we do at NETRUDER. As a company that builds OT IDS and CPS IDS solutions to protect critical infrastructure, we hold ourselves to the same security standards we help our customers achieve. This page describes our security practices and responsible disclosure policy.

Our Security Practices

Encryption in Transit

All data transmitted between your browser and our servers uses TLS 1.2+ encryption. We enforce HTTPS across all pages and redirect HTTP to HTTPS.

Access Controls

Access to internal systems and customer data is restricted to authorized personnel using role-based access control (RBAC) and multi-factor authentication.

Continuous Monitoring

Our infrastructure is monitored 24/7 for security incidents. We use our own OT IDS and CPS IDS technology internally as part of our security stack.

Vulnerability Management

We conduct regular security assessments, penetration testing, and dependency scanning. Critical vulnerabilities are patched within 72 hours.

Infrastructure Security

Cloud infrastructure runs on reputable providers with SOC 2 Type II certification.

Database access is secured with encryption at rest and strict network policies.

All production deployments go through code review and automated security scanning.

Dependencies are regularly updated and monitored for known vulnerabilities.

Security logs are retained and monitored for anomalous access patterns.

Backups are encrypted and tested regularly to ensure data integrity.

Responsible Disclosure

We take security vulnerabilities seriously and appreciate responsible disclosure from the security community. If you discover a potential security issue in our website or products, please report it to us before making it public.

How to Report

Send vulnerability reports to: [email protected]

Please include:

  • A clear description of the vulnerability
  • Steps to reproduce the issue
  • Potential impact assessment
  • Any proof-of-concept code or screenshots

Our Commitments

We will acknowledge receipt of your report within 48 hours.

We will provide an estimated timeline for remediation.

We will notify you when the vulnerability has been resolved.

We will not take legal action against researchers who follow responsible disclosure practices.