New: AI-native post-mortems are here! Get a data-rich draft in minutes.

Security

Security is at the heart of everything we do

Security is a core principle of incident.io—from our tech to our culture. We're SOC 2 Type I & II and GDPR compliant to ensure your data stays safe.

Visit the trust center Vulnerability Disclosure Policy

Security is at the <em>heart</em> of everything we do

How we think about security

Encryption of sensitive data

We encrypt your data using AES-256, the gold standard in encryption technology and safeguard passwords using a secure cryptographic one-way hash function (SHA-256).

Trusted cloud security

We leverage state-of-the-art security measures from industry-leading cloud providers to ensure your data is safe. This means you get the best of both worlds.

Penetration testing and vulnerability scanning

We conduct annual third-party penetration tests and share the results via our Trust center. Weekly scans ensure our product stays resilient against OWASP vulnerabilities and other threats.

Endpoint security

We ensure our devices are running the latest OS and app versions within a month of their release, with new security updates applied as soon as they're available.

Found a security threat?

We reward those who help us stay secure.

Responsible vulnerability disclosure

Our Responsible Disclosure Policy encourages ethical reporting of vulnerabilities and we’ll assess and respond quickly—our team prioritises security concerns above all else..

Reward eligibility

Qualifying vulnerabilities reported responsibly may earn you a place in our bug bounty program. We’ll recognise any significant discovery that enhances our security posture.

Here's how customers get the most out of incident.io

Read all customer stories

With incident.io, Netflix has the incident management platform—and partner—it's always needed

See how Netflix uses incident.io

How incident.io’s pace of development helped Etsy turn incident response into a superpower

See how Etsy uses incident.io

How incident.io helped Skyscanner regain confidence in its incident response processes

See how Skyscanner uses incident.io

With incident.io, Vanta has reduced hours spent on manual processes

See how Vanta uses incident.io

How Intercom migrated from PagerDuty and Atlassian Status Page to incident.io in a matter of weeks

See how Intercom uses incident.io

How incident.io gave WorkOS the confidence to declare more incidents

See how WorkOS uses incident.io