> Security at WEBDEPLOY

Who is responsible

Federico Bologni, Amministratore Unico of WEBDEPLOY SRL, is responsible for information security, including infrastructure hardening, vulnerability management, incident response, and the coordinated disclosure of security issues.

Reporting a vulnerability

If you believe you have found a security vulnerability in our websites, services or infrastructure, please report it by email to security@webdeploy.it.

Please include:

• • A description of the issue and the affected system, URL or component
• • Steps to reproduce it, or a proof of concept
• • The impact you believe it has
• • How we can contact you, and whether you would like to be credited

We aim to acknowledge every report within 5 working days and to keep you informed while we investigate and fix the issue.

Please do not disclose the issue publicly, or to anyone else, until we have released a fix and agreed a disclosure date with you.

We will not pursue or support legal action against anyone who reports a vulnerability to us in good faith, makes a reasonable effort to avoid privacy violations, data destruction and service disruption, accesses only the data needed to demonstrate the issue, and gives us reasonable time to fix it before any disclosure.

Our approach

• • A hardening baseline on the servers we manage, with a firewall and fail2ban
• • Regular operating system and package patching on the servers we manage
• • Encrypted, off-site backups with BorgBackup
• • Intrusion detection with Suricata on managed hosts
• • We follow security advisories from CERT-EU and ENISA