We sell security, so we hold ourselves to the same standard. Here's how we protect our own platform — and how to tell us if you find something wrong with it.
All traffic is encrypted in transit (TLS), with HSTS enabled.
Only the people who run the service can reach servers or data, and only over secure connections.
Portal passwords are stored as salted hashes, never in plain text. Password resets use single-use tokens.
Daily automated backups, retained and encrypted.
Client reports use unguessable single-use tokens — no shared logins for sharing.
We use the same public-data techniques and reputable sources (Qualys SSL Labs, HIBP) we recommend to clients.
Found a security issue in shieldlinesecurity.com or our tools? We're glad you're looking. Please report it privately:
We don't currently run a paid bug bounty, but we will publicly credit responsible reporters (with permission) and say thanks properly. Out of scope: phishing/social engineering against our staff, denial-of-service attacks, and issues in third-party services.
Email security@shieldlinesecurity.com or call 773-573-4908. We take reports seriously and will treat your info confidentially.