Security page — Slab

Cited by

Facts read from this source

• Dev process Report an error

  “We follow industry best practices, so security is baked right into our product and regular development processes – including security design reviews, code reviews, unit & integration tests.”

• Owasp training Report an error

  “All engineers are required to know OWASP vulnerabilities and use libraries, frameworks, and mitigations vetted and recommended by the security community, such as Strict CSP.”

• Vulnerability scanning Report an error

  “Our application, host, and network are automatically scanned. We also automatically detect out-of-date dependencies.”

• Admin controls Report an error

  “Team administrators can manage team-wide settings, including requiring single sign-on and two-factor authentication, managing integrations, and deactivating users.”

• Encryption in transit Report an error

  “Data in transit runs entirely over SSL, with an A+ from Qualys SSL Labs.”

• Encryption at rest Report an error

  “Data at rest is encrypted with AES 128/256.”

• Password hashing Report an error

  “All passwords are hashed using bcrypt”

• Payment provider Report an error

  “billing information is entirely managed by our PCI-compliant payments provider (Stripe).”

• Secrets management Report an error

  “Secrets are stored securely and never in source code. Access to our infrastructure and related services requires SSH and two-factor authentication when possible.”

• Backups Report an error

  “Our infrastructure runs on fault-tolerant systems and backups are made daily.”

• Monitoring Report an error

  “We leverage redundant third-party providers to provide 24/7 monitoring and alerting of any downtime.”

• Penetration testing Report an error

  “We conduct annual penetration tests on our application and infrastructure. These audits are conducted by respected independent security firms.”

• Hosting certifications Report an error

  “Slab is hosted on Google Cloud Platform, a leading cloud provider that holds rigorous industry security certifications, such as SOC 2 and ISO 27001.”

• Soc3 Report an error

  “Slab itself is certified under SOC 3 (download report)”

• SOC 2 type2 Report an error

  “SOC 2 Type 2”

• GDPR Report an error

  “fully compliant with the EU General Data Protection Regulation (GDPR)”

• Provider Report an error

  “Slab is hosted on Google Cloud Platform”

Scores citing this record

• The Engineering Lead Permissions, SSO & administration
• The Engineering Lead European sovereignty
• The IT Administrator Permissions, SSO & administration
• The IT Administrator European sovereignty
• The Operations Lead Permissions, SSO & administration
• The Operations Lead European sovereignty
• The Quality Manager Permissions, SSO & administration
• The Quality Manager European sovereignty
• The Skeptic Permissions, SSO & administration
• The Skeptic European sovereignty
• The Support Knowledge Manager Permissions, SSO & administration
• The Support Knowledge Manager European sovereignty