Security at NewExploits
We hold ourselves to the standard we test others against. Here is how we protect your data and run our own security.
Data protection
Client data and findings are encrypted in transit and at rest. We collect the minimum we need and delete engagement data on an agreed schedule.
Access control
Access to client material follows least privilege and is limited to the engagement team, with strong authentication on every account.
Confidentiality
We sign NDAs before scoping, and findings are shared only through secure channels agreed with you.
Handling of findings
Reports and proof-of-concept exploits are stored securely, shared only with authorised recipients, and destroyed or returned when the engagement ends.
Reporting a vulnerability
If you have found a security issue in our own systems, see our Responsible Disclosure page for how to report it safely.