Security

Your Data, Protected

Surgepulse is built security-first. End-to-end encryption, zero-trust architecture, and continuous monitoring — so your team can focus on building.

Security Architecture

Six layers of enterprise-grade protection built into every plan

Encryption Everywhere

  • AES-256 encryption at rest
  • TLS 1.3 for all data in transit
  • Encrypted database backups
  • Key rotation every 90 days

Zero-Trust Access

  • Role-based access control (RBAC)
  • SSO via SAML 2.0 & OIDC
  • Hardware MFA (FIDO2 / WebAuthn)
  • Session timeout & device mgmt

24/7 Monitoring

  • Real-time threat detection
  • Anomaly alerting via SIEM
  • Full audit logs (180-day retention)
  • Automated incident response

Infrastructure Isolation

  • Dedicated tenancy on Enterprise
  • VPC-isolated compute & storage
  • Private endpoints available
  • No shared database clusters

Vulnerability Management

  • Annual third-party pen testing
  • Automated dependency scanning
  • Responsible disclosure programme
  • CVE patching within 24–72 hrs

Business Continuity

  • Automated daily backups
  • Point-in-time recovery (PITR)
  • Multi-region failover
  • RTO < 1 hr / RPO < 15 min

Certifications & Compliance

ISO 27001
GDPR
HIPAA Ready
CCPA

Responsible Disclosure

Found a security vulnerability? We take all reports seriously. Please email security@surgepulse.com with a description of the issue, steps to reproduce, and your contact details. We aim to acknowledge reports within 24 hours and resolve critical issues within 72 hours.

We do not pursue legal action against researchers who act in good faith.

Have Security Questions?

Our security team is happy to answer questions from Enterprise customers and prospective buyers.

Contact Us