Security Practices
At IronWall Cyber Solutions, security isn't just what we sell — it's how we operate. We hold ourselves to the same rigorous standards we apply when assessing our clients. Below is an overview of the measures we take to protect your data and ensure the integrity of our services.
Encryption at Rest & in Transit
All data — including assessment reports, customer information, and call recordings — is encrypted using AES-256 at rest and TLS 1.3 in transit. We never store or transmit sensitive data in plain text.
Infrastructure Security
Our platform runs on hardened, SOC 2-compliant cloud infrastructure with automated patching, network segmentation, and continuous monitoring. Access to production systems is restricted to authorized personnel via multi-factor authentication and role-based access controls.
Minimal Data Collection
We only collect the information necessary to deliver your assessment. Network assets (domains/IPs) are processed exclusively within your agreed scope. Assessment data and reports are retained for 12 months, then permanently deleted. Call recordings and transcripts are deleted after exactly one year.
Scope-Bound Assessments
Every engagement is scoped in writing before work begins. We perform only the external exposure review you authorize — nothing more. Our methodology is non-invasive and designed to identify vulnerabilities without disrupting your operations.
Personnel & Access Controls
All team members undergo background checks and security awareness training. Access to customer data follows the principle of least privilege. Credentials are rotated regularly, and all access is logged and auditable.
Incident Response
We maintain a documented incident response plan with defined escalation procedures. In the unlikely event of a security incident affecting your data, we commit to notifying affected customers within 72 hours in accordance with GDPR requirements.
Responsible Disclosure
If you believe you have discovered a security vulnerability on our platform, we encourage responsible disclosure. Please contact us at security@ironwallscan.com with details. We will acknowledge receipt within 48 hours and work with you to understand and address the issue promptly.
Questions?
For questions about our security practices, please contact us at security@ironwallscan.com. For privacy-related inquiries, see our Privacy Policy.