Security Policy

Our commitment to security is paramount. This policy outlines the measures we take to ensure the safety of our data and infrastructure, particularly in the context of patch management for Linux environments.

Data Encryption

We employ industry-leading encryption standards to protect data both at rest and in transit:

  • Data at rest: AES-256 encryption
  • Data in transit: TLS 1.3

These measures are crucial for securing the distribution and application of patches in Linux environments.

AWS Infrastructure

Our core infrastructure leverages AWS for:

  • High reliability and security
  • Scalability and high availability
  • Service replication across two independent regions

This setup ensures continuous availability of patch management services for Linux systems.

CloudFlare CDN and Security

We partner with CloudFlare to enhance our security posture:

  • Web Application Firewall (WAF)
  • DDoS protection
  • Secure CDN for patch distribution

These features are particularly beneficial for securing the update process in Linux environments.

Server Access

We maintain strict control over server access through:

  • AWS Identity and Access Management (IAM)
  • Policy-based access control
  • Full auditability of access attempts

This rigorous access control is crucial for maintaining the integrity of the Linux patch management process.

Code Changes and Reviews

Our development process includes a thorough three-review system:

  1. Development environment
  2. Staging environment
  3. Production environment

This process ensures the quality and security of our patch management solutions for Linux systems.

Binary Signing

To ensure the integrity of software binaries:

  • All delivered binaries are fully signed
  • Signing occurs in private GitHub CI/CD pipelines
  • This process guarantees authenticity and integrity of patches for Linux systems