Security at Eresus Guard.
This is the starting point for security reporting and for the trust documents behind the product. For a suspected vulnerability, send a private report to security@eresussec.com. Do not open a public issue or send customer data.
Start here
- Vulnerability Disclosure Policy — Report a suspected vulnerability in Eresus Guard: scope, evidence, response targets, and the safe harbor for good-faith research.
- Responsible Scanning Policy — The authorization, scope, and safety rules you must meet before running an assessment with Eresus Guard.
- Data Controls — The technical controls that isolate, encrypt, audit, and erase customer data in the product.
- Data Retention and Deletion — How long each category of data is kept, and how erasure works.
- Subprocessors — The third parties that support the site and the hosted service, and what they receive.
- Support and Service Levels — Support channels, severity definitions, and target response times.
Reach the security team
- Vulnerability reports: security@eresussec.com. Keep the first report private.
- Security questionnaires and reviews: contact@eresussec.com.
- We aim to acknowledge a report within 48 hours, and to give an initial severity and timeline within seven business days.
Scope of what we publish
Everything here describes controls we implement and processes we follow. We do not claim a certification or a named standard on this site, and a plain-language page does not replace the executed Data Processing Addendum. Where a control depends on your region, plan, or enabled integrations, the order package for your deployment is the authoritative record.
Found something?
Email security@eresussec.com with the smallest evidence set that proves the issue, and read the disclosure policy first.