Security Policy

At StratumGuard, cybersecurity is our core business. We apply the same high standards to our own website and operations that we recommend to our clients.

Our Security Commitments

This page outlines the security measures we've implemented to protect our website visitors and clients. By publishing these details, we demonstrate our commitment to transparency and security best practices.

Website Security Measures

• HTTPS Encryption: All traffic to our website is encrypted using TLS 1.3, protecting your communications from interception.
• Content Security Policy (CSP): We implement a strict CSP to prevent cross-site scripting (XSS) attacks and other code injection vulnerabilities.
• Secure Headers: Our website implements modern security headers including X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and more.
• Subresource Integrity: External scripts are verified using SRI to ensure they haven't been tampered with.
• Regular Vulnerability Scanning: We perform weekly automated and quarterly manual security assessments of our website and infrastructure.

Form & Contact Security

• reCAPTCHA Protection: All forms are protected by invisible reCAPTCHA to prevent automated submissions and spam.
• Input Validation: Strict server-side validation of all form inputs protects against injection attacks.
• Rate Limiting: We implement rate limiting to prevent abuse of our contact forms and API endpoints.
• Secure Form Processing: Form submissions are processed securely and transmitted directly to our internal systems without being stored on our website.

Data Protection & Privacy

• Limited Data Collection: We only collect the minimum data necessary to respond to your inquiries.
• No Unnecessary Tracking: We use privacy-focused analytics that anonymize IP addresses and respect Do Not Track settings.
• Cookie Consent: We obtain explicit consent before using any non-essential cookies.
• Data Retention: Contact form submissions are retained only as long as necessary to address your inquiry.
• Secure Processing: Any personal data is processed in accordance with ourPrivacy Policy.

Infrastructure Security

• Serverless Architecture: We use AWS serverless technologies to reduce attack surface and ensure automatic patching.
• Content Delivery Network: Our CDN provides additional layer of protection against DDoS attacks and common vulnerabilities.
• WAF Protection: Web Application Firewall rules protect against OWASP Top 10 vulnerabilities.
• Least Privilege Access: All systems and services operate with minimum necessary permissions.
• Regular Security Updates: Our infrastructure and dependencies are automatically updated to address security vulnerabilities.

Security Vulnerability Reporting

We appreciate the work of security researchers and welcome responsible disclosure of security vulnerabilities in our website. If you believe you've found a security issue, please email us atsecurity@stratumguard.com.

We commit to:

• Acknowledge receipt of your vulnerability report within 24 hours
• Provide a timeline for resolution within 72 hours
• Notify you when the vulnerability is fixed
• Recognize your contribution (if desired) once the issue is resolved

Our Security Expertise

As a cybersecurity consulting firm specializing in executive security leadership, we bring the same rigor and expertise to our own security practices that we provide to our clients. Our approach to website security represents just one example of the comprehensive security programs we help organizations develop.

If you're interested in learning how StratumGuard can help strengthen your organization's security posture, please contact usfor a consultation.