Secure Development

How we’ve secured our development.
From security design review to rigorous penetration testing, Sepio commits to the highest industry standard of secure development life cycle.

Secure – Software Development Life Cycle (S-SDLC)
Code changes undergo rigorous automated and manual testing, including dynamic application security testing (DAST) and peer reviews in a staging environment to ensure code quality before its deployment to production.

Application – OWASP
Sepio follows the Open Web Application Security Project (OWASP) Top 10 methodology to build in application security for our secure software development life cycle (S-SDLC).

Code Security
We use multiple tools to scan our code for vulnerabilities throughout the different stages of the code development, testing and integration into the final built package.

Software Supply Chain
All software libraries and ingredients are automatically checked for publicly disclosed vulnerabilities using a Software Bill of Materials (SBOM) tool to manage our software supply chain risk.

Environments Segregation
Production servers environment is completely isolated from development, staging, and build environments.

Our commitment to information security and data privacy is embedded in every part of our business.

Learn more about our security posture and the security measures we implement.

Platform Security

How we’ve secured our platform.
With comprehensive authentication and authorization methods, safe code development, data protection measures. Use our platform with confidence.

Corporate Security Measures

How we’ve secured our corporate infrastructure.
From endpoint protection and management defense layers to a dedicated, protected internal network and multiple security protection layers.

Security Governance

Our security governance frame.
Sepio ensures the highest industry standard for secure development through security design review and rigorous penetration testing.

Security Certifications

Our certifications and attestations.
Leveraging our world-class security framework, we were awarded with SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017 certifications.

Privacy

Our commitment to data privacy.
Sepio’s privacy program is all about doing right by not storing any private data.

Resiliency

Our Disaster Recovery and Business Continuity Plans.
Elaborated DRP and BCP was put in place and tested to address potential scenarios and to meet Sepio’s data and operation recovery objectives.

Bounty Program

If you want to know more about Sepio’s security framework or you would like to make a security disclosure, please don’t hesitate to contact our CISO at:

ciso@sepiocyber.com