loader image
Mindflow won the Jury Prize at the FIC 2022 Startup Award! Get a demo to transform your SecOps forever.

Security at Mindflow

security

Security is a top priority for every company. Threats are growing exponentially in terms of occurrence and gravity. That’s why we embedded it as one of our core values from the beginning. We’re providing you with a solution built with security at its heart by following best practices as we create. 

Application

WAF

We use AWS Web Application Firewall to protect our environment from SQL injection attacks and cross-site scripting attacks besides creating custom security rulesets.

encryption

To safeguard our data at rest, we use AES-256 encryption, the highest standard allowed in the US.

vault

We've designed a Vault integrated into our platform to create a single sign-on instance. It will help your teams log in their credentials and keep them safe, thanks to AWS Secret Manager.

Infrastructure

serverless

A serverless architecture to keep speed and agility as we scale up to focus on applications while at the same time allowing us to be secure.

automated-process

Managing our infrastructure as code using CDK allows us to accelerate the development process by modeling the infrastructure in a programming language and in numerous environments before going into production.

packet

Packet filtering helps us prevent IP and MAC addresses from spoofing by blocking packets with incorrect source address information.

Code

review

We enable peer review and integration tests to check our code on sandboxes for compiling errors.

code analysis

Using Static Code Analysis, we are checking for credentials in our source code and enhancing our security at the core.

Privileges

control

A secure governance and management system using AWS Control Tower and Organizations provides identity management, cross-account security audits, and federate access to accounts enforced by high-level rules.

identity

Our user identities system is unified to provide fine-grained access, thanks to AWS SSO.

Compliance

compliance

Our goal is to be audited SOC 2 Type 1 and certified ISO 27001 by the end of 2022. Soon, you'll be able to track our progress in this process on our website.