Security
Learn about GitGlue's comprehensive security features, best practices, and how to protect your repositories and data.
Authentication
We use WorkOS for all our authentication. We offload this security to them and rely on their compliance and security. We are constantly evaluating this to ensure that we are using the best practices and technologies.
- • Multi-factor authentication (MFA)
- • Single sign-on (SSO)
- • OAuth 2.0 integration
- • Session management
Access Control
Granular access control to manage who can view, edit, or manage your repositories.
- • Role-based permissions
- • Repository-level access
- • Team management
- • Audit logging
Data Protection
Comprehensive data protection measures to secure your code and sensitive information.
- • End-to-end encryption
- • Data at rest encryption
- • Secure transmission (TLS)
- • Data retention policies
Security Monitoring
Continuous monitoring and alerting to detect and respond to security threats.
- • Real-time threat detection
- • Security incident alerts
- • Vulnerability scanning
- • Compliance reporting
Security Features
Encryption
AES-256 encryption for data at rest and TLS 1.3 for data in transit.
Compliance
SOC 2 Type II, GDPR, HIPAA, and other industry compliance standards.
Penetration Testing
Regular security assessments and third-party penetration testing.
Security Best Practices
Password Security
Use strong, unique passwords and enable multi-factor authentication for all accounts.
Access Management
Regularly review and update access permissions, removing access for inactive users.
Code Security
Scan for vulnerabilities, use secure coding practices, and keep dependencies updated.
Getting Started with Security
1. Enable Security Features
Activate multi-factor authentication and configure security settings in your account.
2. Set Up Access Controls
Configure role-based permissions and team access for your repositories.
3. Monitor Security Events
Set up security alerts and regularly review audit logs for suspicious activity.