security.trustCenter.badge

security.trustCenter.title

security.trustCenter.subtitle

🛡️SOC 2
🏅ISO 27001
🇪🇺GDPR
💳PCI DSS
⭐CSA STAR
🏥HIPAA
🔐NIST
🇹🇷KVKK
security.trustCenter.status.operationalsecurity.trustCenter.status.link

security.trustCenter.arrays.trustFeatures.0.title

security.trustCenter.arrays.trustFeatures.0.description

security.trustCenter.arrays.trustFeatures.1.title

security.trustCenter.arrays.trustFeatures.1.description

security.trustCenter.arrays.trustFeatures.2.title

security.trustCenter.arrays.trustFeatures.2.description

security.trustCenter.arrays.trustFeatures.3.title

security.trustCenter.arrays.trustFeatures.3.description

security.trustCenter.arrays.trustFeatures.4.title

security.trustCenter.arrays.trustFeatures.4.description

security.trustCenter.arrays.trustFeatures.5.title

security.trustCenter.arrays.trustFeatures.5.description

security.trustCenter.arrays.trustFeatures.6.title

security.trustCenter.arrays.trustFeatures.6.description

security.trustCenter.arrays.trustFeatures.7.title

security.trustCenter.arrays.trustFeatures.7.description

security.trustCenter.sections.securityTxt.title (RFC 9116)

security.trustCenter.sections.securityTxt.description

# CyberSec Pro Security Policy

# RFC 9116 Compliant

Contact: mailto:[email protected]

Contact: https://cyber-sec-pro.com/trust-center#responsible-disclosure

Encryption: https://cyber-sec-pro.com/.well-known/pgp-key.txt

Acknowledgments: https://cyber-sec-pro.com/trust-center#acknowledgments

Policy: https://cyber-sec-pro.com/trust-center#responsible-disclosure

Hiring: https://cyber-sec-pro.com/careers

Preferred-Languages: en, tr

Canonical: https://cyber-sec-pro.com/.well-known/security.txt

Expires: 2027-07-31T23:59:59.000Z

security.trustCenter.sections.securityTxt.directAccesssecurity.trustCenter.sections.securityTxt.pgpKey

security.trustCenter.sections.disclosure.title

1security.trustCenter.sections.disclosure.scope

security.trustCenter.sections.disclosure.scopeIn

  • cyber-sec-pro.com (sub-domains)
  • app.cyber-sec-pro.com (SaaS platform)
  • api.cyber-sec-pro.com (REST & GraphQL API)
  • Mobile Apps (iOS / Android)
  • Open Source Components (GitHub)

security.trustCenter.sections.disclosure.scopeOut

  • Social engineering & phishing
  • DDoS / DoS
  • Physical security
  • Third-party services

2security.trustCenter.sections.disclosure.channel

security.trustCenter.sections.disclosure.channelDesc [email protected]

security.trustCenter.sections.disclosure.reportTemplate

  • Subject: [SECURITY] Short description
  • Affected asset: URL / endpoint
  • Vulnerability type: (XSS, SQLi, IDOR, etc.)
  • Steps to reproduce: (1, 2, 3...)
  • Impact: (Data leak, Privilege escalation, etc.)
  • CVSS score (optional)
  • PoC / Screenshots

3security.trustCenter.sections.disclosure.sla

  • security.trustCenter.sections.disclosure.slaFirst ≤ 24 hours
  • security.trustCenter.sections.disclosure.slaUpdate ≤ 72 hours
  • security.trustCenter.sections.disclosure.slaFix ≤ 90 days

4security.trustCenter.sections.disclosure.safeHarbor

  • security.trustCenter.sections.disclosure.safeHarbor1
  • security.trustCenter.sections.disclosure.safeHarbor2
  • security.trustCenter.sections.disclosure.safeHarbor3
  • security.trustCenter.sections.disclosure.safeHarbor4

$security.trustCenter.sections.disclosure.bountyTable

security.trustCenter.sections.disclosure.tableLevelCVSSsecurity.trustCenter.sections.disclosure.tableReward
security.trustCenter.arrays.bugBountyRewards.0.severity9.0–10.0$5,000 – $15,000
security.trustCenter.arrays.bugBountyRewards.1.severity7.0–8.9$2,000 – $5,000
security.trustCenter.arrays.bugBountyRewards.2.severity4.0–6.9$500 – $2,000
security.trustCenter.arrays.bugBountyRewards.3.severity0.1–3.9$100 – $500

security.trustCenter.sections.compliance.title

10/10 security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.0.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.0.note
security.trustCenter.arrays.complianceFrameworks.1.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.1.note
security.trustCenter.arrays.complianceFrameworks.2.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.2.note
security.trustCenter.arrays.complianceFrameworks.3.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.3.note
security.trustCenter.arrays.complianceFrameworks.4.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.4.note
security.trustCenter.arrays.complianceFrameworks.5.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.5.note
security.trustCenter.arrays.complianceFrameworks.6.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.6.note
security.trustCenter.arrays.complianceFrameworks.7.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.7.note
security.trustCenter.arrays.complianceFrameworks.8.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.8.note
security.trustCenter.arrays.complianceFrameworks.9.name✓ security.trustCenter.sections.compliance.compliant
security.trustCenter.arrays.complianceFrameworks.9.note

security.trustCenter.sections.incident.title

security.trustCenter.sections.incident.description

security.trustCenter.sections.incident.prioritysecurity.trustCenter.sections.incident.detectionsecurity.trustCenter.sections.incident.responsesecurity.trustCenter.sections.incident.notificationsecurity.trustCenter.sections.incident.resolution
P0 — Critical≤ 15 min≤ 30 min≤ 1 hour≤ 4 hours
P1 — High≤ 30 min≤ 1 hour≤ 4 hours≤ 24 hours
P2 — Medium≤ 1 hour≤ 4 hours≤ 24 hours≤ 72 hours
P3 — Low≤ 4 hours≤ 24 hours≤ 72 hours≤ 30 days

security.trustCenter.sections.subprocessors.title

security.trustCenter.sections.subprocessors.description

security.trustCenter.sections.subprocessors.providersecurity.trustCenter.sections.subprocessors.purposesecurity.trustCenter.sections.subprocessors.locationDPA
Stripe, Inc.security.trustCenter.arrays.subProcessorPurposes.0ABD (EU SCC + DPF)✓ security.trustCenter.sections.subprocessors.signed
Vercel, Inc.security.trustCenter.arrays.subProcessorPurposes.1Global Edge (EU SCC)✓ security.trustCenter.sections.subprocessors.signed
Cloudflare, Inc.security.trustCenter.arrays.subProcessorPurposes.2Global (EU SCC + DPF)✓ security.trustCenter.sections.subprocessors.signed
AWS (Amazon)security.trustCenter.arrays.subProcessorPurposes.3EU (Frankfurt, eu-central-1)✓ security.trustCenter.sections.subprocessors.signed
PostgreSQL (Supabase)security.trustCenter.arrays.subProcessorPurposes.4EU (Frankfurt)✓ security.trustCenter.sections.subprocessors.signed
SendGrid (Twilio)security.trustCenter.arrays.subProcessorPurposes.5ABD (EU SCC)✓ security.trustCenter.sections.subprocessors.signed
Sentrysecurity.trustCenter.arrays.subProcessorPurposes.6ABD (EU SCC)✓ security.trustCenter.sections.subprocessors.signed

security.trustCenter.sections.subprocessors.footer

security.trustCenter.sections.dpa.title

security.trustCenter.sections.dpa.description

security.trustCenter.sections.dpa.scopeTitle

  • Purpose and methods of processing
  • Types of personal data and data subjects
  • List of sub-processors and approval process
  • Technical and organizational measures (TOMs)
  • Data breach notification procedures (≤72 hrs)
  • Data transfer mechanisms (EU SCC, DPF)

security.trustCenter.sections.dpa.dpiaTitle

  • GDPR Article 35 compliant DPIA completed
  • High-risk processing operations documented
  • Risk mitigation measures implemented
  • Annual review by Data Protection Officer (DPO)
  • Available to customers upon request
security.trustCenter.sections.dpa.requestBtnsecurity.trustCenter.sections.dpa.dpoBtn

security.trustCenter.sections.pentest.title

security.trustCenter.sections.pentest.description

External Penetration Test

Cobalt.io — CREST Certified

2026-06-15security.trustCenter.arrays.pentestHistory.0.status

security.trustCenter.sections.pentest.scope security.trustCenter.arrays.pentestHistory.0.scope

security.trustCenter.sections.pentest.findings security.trustCenter.arrays.pentestHistory.0.findings

security.trustCenter.sections.pentest.requestReport
Source Code Review (SAST)

NCC Group

2026-03-10security.trustCenter.arrays.pentestHistory.1.status

security.trustCenter.sections.pentest.scope security.trustCenter.arrays.pentestHistory.1.scope

security.trustCenter.sections.pentest.findings security.trustCenter.arrays.pentestHistory.1.findings

security.trustCenter.sections.pentest.requestReport
Cloud Infrastructure Audit

Bishop Fox

2025-12-01security.trustCenter.arrays.pentestHistory.2.status

security.trustCenter.sections.pentest.scope security.trustCenter.arrays.pentestHistory.2.scope

security.trustCenter.sections.pentest.findings security.trustCenter.arrays.pentestHistory.2.findings

security.trustCenter.sections.pentest.requestReport
Red Team Exercise

Mandiant (Google Cloud)

2025-09-20security.trustCenter.arrays.pentestHistory.3.status

security.trustCenter.sections.pentest.scope security.trustCenter.arrays.pentestHistory.3.scope

security.trustCenter.sections.pentest.findings security.trustCenter.arrays.pentestHistory.3.findings

security.trustCenter.sections.hallOfFame.title

security.trustCenter.sections.hallOfFame.description

security.trustCenter.sections.hallOfFame.empty

security.trustCenter.sections.hallOfFame.reportBtn

security.trustCenter.sections.contact.statusTitle

security.trustCenter.sections.contact.statusDesc

security.trustCenter.sections.contact.statusBtn

security.trustCenter.sections.contact.contactTitle

security.trustCenter.sections.contact.security: [email protected]

security.trustCenter.sections.contact.legal: [email protected]

DPO: [email protected]

security.trustCenter.sections.contact.privacy: [email protected]

security.txtPGP Key

security.trustCenter.sections.contact.footer