Security

Security is at the heart of everything we do

Security is a core principle of incident.io—from our tech to our culture. We're SOC 2 Type I & II and GDPR compliant to ensure your data stays safe.

Visit the trust center Vulnerability Disclosure Policy

Security is at the _heart_ of everything we do

How we think about security

Encryption of sensitive data

We encrypt your data using AES-256, the gold standard in encryption technology and safeguard passwords using a secure cryptographic one-way hash function (SHA-256).

Trusted cloud security

We leverage state-of-the-art security measures from industry-leading cloud providers to ensure your data is safe. This means you get the best of both worlds.

Penetration testing and vulnerability scanning

We conduct annual third-party penetration tests and share the results via our Trust center. Weekly scans ensure our product stays resilient against OWASP vulnerabilities and other threats.

Endpoint security

We ensure our devices are running the latest OS and app versions within a month of their release, with new security updates applied as soon as they're available.

Found a security threat?

We reward those who help us stay secure.

Responsible vulnerability disclosure

Our Responsible Disclosure Policy encourages ethical reporting of vulnerabilities and we’ll assess and respond quickly—our team prioritises security concerns above all else..

Reward eligibility

Qualifying vulnerabilities reported responsibly may earn you a place in our bug bounty program. We’ll recognise any significant discovery that enhances our security posture.

Built for teams where downtime isn't an option

Read all customer stories

How Zendesk ditched 15 years of patchwork tooling, in 10 weeks

See how Zendesk uses incident.io

With incident.io, Netflix has the incident management platform—and partner—it's always needed

See how Netflix uses incident.io

How incident.io’s pace of development helped Etsy turn incident response into a superpower

See how Etsy uses incident.io

How incident.io helped Skyscanner regain confidence in its incident response processes

See how Skyscanner uses incident.io

With incident.io, Vanta has reduced hours spent on manual processes

See how Vanta uses incident.io

How Fin migrated from PagerDuty and Atlassian Status Page to incident.io in a matter of weeks

See how Fin uses incident.io