TestProject platform is built on top of the best in class infrastructure providers such as Amazon and CloudFlare. We carefully choose the most secure solutions when it comes to data and security, and always keep updated with industry best-practices to ensure we are in accordance with changes and updates.
If you have encountered an issue or a flaw that may have an impact on the data security or privacy of TestProject users, please let us know at [email protected], so we can investigate it right away. For more info on our Bounty Policy Program, please reach out to [email protected].
TestProject uses certified services, such as AWS S3, to store your data. AWS also maintains the following certifications: HIPAA, GDPR, ISO 27001, SOC 1/2/3, Directive 95/46/EC and PCI DSS Level 1.
To build reliable and distributed security architecture at TestProject we used OAuth2, OpenID Connect and JSON Web Tokens (JWT) which are industry standards for security, authentication and authorization.
Development and API access is protected using dedicated Account and/or User tokens for secured identifications and authorization of the requesting party.
To ensure data integrity and protection, all binary artifacts are stored in a secure environment of certified cloud providers.
The execution of tests on your TestProject agents (local/remote) happens in a sandboxed environment enforced by the Java Security Manager. This helps to protect your system from unauthorized access.
All TestProject servers are protected by firewalls and various other systems. Technical access is allowed through dedicated subnets and VPNs.
Passwords and other sensitive information can be saved by using TestProject’s “Secret Parameters” feature, which adds another layer of data encryption.
All TestProject data transfers are carried out via an SSL-encrypted connection.
Have a question, concern, or comment about TestProject security? Please contact TestProject support here.