As a company built to help other organizations secure their software, we hold ourselves to the same standard. This page summarizes how we approach security across our platform, infrastructure, and internal practices. For how we handle personal data specifically, see our Privacy Policy and Data Processing Addendum.
1. Our Approach to Security
Security is core to ClearAnts’ mission — our platform helps engineering teams find and fix vulnerabilities across their software development lifecycle. We apply the same discipline internally: security is considered at every stage of building and operating our own platform, from infrastructure design to day-to-day operations.
2. Infrastructure & Hosting
- Our infrastructure is hosted with reputable cloud providers that maintain their own industry-recognized certifications for physical and network security.
- Production environments are logically separated from development and testing environments.
- Network access to production systems is restricted and monitored.
3. Application Security Practices
As a DevSecOps company, we practice what we build. Our software development lifecycle incorporates:
- Use of our own security testing tooling against our codebase and dependencies;
- Code review prior to deployment of changes;
- Dependency and software composition tracking to identify and remediate known vulnerabilities; and
- Separation of duties between development and production deployment where practical.
4. Data Protection & Encryption
- Data is encrypted in transit using industry-standard TLS.
- Access to customer data is limited to personnel who need it to provide and support the Platform.
- Data handling practices are further described in our Privacy Policy and Data Processing Addendum.
5. Access Control
- Internal access to systems and customer data follows the principle of least privilege.
- Access to critical internal systems requires individually attributable credentials, and is reviewed periodically.
6. Sub-processors
We rely on a small number of vetted third-party providers (for example, cloud hosting and infrastructure) to help us deliver the Platform. Details on our sub-processor practices are set out in Annex 2 of our DPA.
7. Vulnerability Disclosure
We welcome reports from security researchers who discover potential vulnerabilities in our website or platform. If you believe you have found a security issue, please report it to us at info@clearants.io with enough detail for us to reproduce and assess it. Please report in good faith, avoid accessing or modifying data that is not yours, and give us a reasonable amount of time to investigate and address the issue before any public disclosure.
8. Compliance & Certifications
ClearAnts does not currently hold formal third-party security certifications (such as ISO/IEC 27001 or SOC 2). As we grow, we are working toward pursuing industry-recognized certifications that align with the needs of our customers. If your organization requires specific compliance documentation as part of a procurement process, please contact us at info@clearants.io and we will do our best to assist.
9. Report a Security Issue
To report a security vulnerability or ask a security-related question, contact us at info@clearants.io.