Ukuvikeleka & Responsible Disclosure
Indlela iCodePus evikela ngayo CodePus yakho, izitifiketi zakho neqembu lakho.
Our Ukuvikeleka posture
CodePus encrypts idatha in transit nga TLS 1.3 and at rest nga AES-256. Tenant idatha kuyinto isolated per organisation. We follow principle of least privilege ngoba Konke internal access and rotate signing Ukhiye quarterly.
- TLS 1.3 nga HSTS ngoba every esidlangalaleni endpoint
- At-rest encryption (AES-256) ngoba Ukusetshenziswa records, secrets and Imodeli traces
- OAuth 2.0 + PKCE + RFC 8628 kudivayisi-ikhodi ukugeleza for IDE login
- SSO (SAML 2.0 / OIDC) ne-SCIM 2.0 yamaphakheji ezinkampani
- Per-Isicelo signing of Buyekeza artefacts (sha256 + https-only)
Ukuhambisana
We continuously align nga industry standards.
- SOC 2 Uhlobo II — ukuhlola in inqubekela
- I-GDPR & PIPL Amaphuzu okugcina wokuthekelisa nokucishwa kwedatha avezwe ngaphansi kwe- /dashboard/security
- ISO/IEC 27001 Ukulawula okuchazwe, ikhadi lokulawula ukuqinisekiswa elivezwe ngezansi
Umbiko okukodwa vulnerability
Siyakwamukela imibiko evela kubacwaningi. Sicela ulandele ukudalulwa okufanele: ungavezi inkinga esidlangalaleni kuze kube yilapho sinesikhathi esinengqondo sokuyilungisa (ngokuvamile izinsuku ezingu-90).
- service@codepus.ai
Umunwe we-PGP: 4C5E 1F0B 9E1A 7D2A 3F4B 6C7D 8E9F 0A1B 2C3D 4E5F- Kulesi sigaba: codepus.ai, *.codepus.ai, ukusatshalaliswa kwe-IDE okuyincithakalo kanye ne-open source repository.
- Out of scope: clickjacking on unauthenticated marketing ikhasi, missing Ukuvikeleka headers without proven umthelela, automated scanner Okuphumayo.
- Bounties of $100–$10,000 USD ziyinto awarded ngoba in-scope, reproducible vulnerabilities at discretion of Ukuvikeleka Ithimba.
IHholo Lemidumo Yokuhlonishwa Kwezinambuzane
We publish researcher acknowledgements with consent after the issue is resolved. Email service@codepus.ai if you would like to be listed.