Security Policy / Trust Center
Last updated: March 9, 2026
Our Security Commitment
SecuProbe is built as a security platform designed to help organizations identify vulnerabilities in their web assets. Protecting the integrity, confidentiality, and availability of our own infrastructure is therefore a fundamental priority.
This page outlines the measures we implement to protect customer data and ensure the reliability of the SecuProbe platform.
Infrastructure Security
SecuProbe infrastructure is hosted on dedicated servers in Europe with strong security controls. Key principles include:
- Secure cloud hosting infrastructure
- Network isolation and access control
- Continuous monitoring of infrastructure activity
- Regular system updates and patch management
Production environments are isolated from development and testing environments.
Data Protection
SecuProbe protects customer data using strong technical safeguards. Security measures include:
- Encryption in transit using HTTPS / TLS 1.3
- Secure password hashing using bcrypt
- Encrypted communication between internal services
- Strict access control policies for internal systems
Access to production data is restricted to authorized personnel with a legitimate operational need.
Scan Data Retention
Scan results contain sensitive information about our customers' infrastructure. We apply a strict retention policy:
- Scan results are retained for 90 days after creation
- Users can delete their scans at any time from the dashboard
- Upon account closure, all associated data is deleted within 30 days
Application Security
The SecuProbe platform is developed following secure development practices. Our application security program includes:
- Secure coding standards
- Dependency vulnerability monitoring
- Regular security testing
- Continuous monitoring of application logs and anomalies
- SecuProbe is regularly scanned using its own platform — we apply our tool to our own infrastructure
Security improvements are integrated into our development lifecycle.
Vulnerability Management
SecuProbe actively monitors and manages vulnerabilities affecting its systems. This includes:
- Monitoring security advisories and CVEs
- Regular dependency updates
- Internal security testing
- Prompt remediation of identified vulnerabilities
We also maintain a Responsible Disclosure Program that allows external researchers to report security issues safely.
Access Control
Access to SecuProbe infrastructure is tightly controlled. Measures include:
- Role-based access control (RBAC)
- Multi-factor authentication for administrative accounts
- Audit logging of sensitive operations
- Principle of least privilege for system access
All sensitive actions are logged and monitored.
Incident Response
SecuProbe maintains internal procedures for detecting and responding to security incidents. Our response process includes:
- Rapid investigation of suspected incidents
- Containment and mitigation of security threats
- Notification to affected users within 72 hours as required by GDPR
- Post-incident analysis and remediation
Compliance and Privacy
SecuProbe is designed with privacy and data protection principles in mind. We comply with applicable regulations including:
- GDPR (General Data Protection Regulation)
- Applicable European data protection requirements
Our Privacy Policy provides detailed information on how personal data is collected and processed.
Contact
For security-related inquiries: security@secuprobe.io
For privacy-related inquiries: privacy@secuprobe.io