Penetration testing

An independent penetration test of HELAÜLOOM is scheduled before general availability. We will publish a summary here once it is complete.

Scope. The web application, API surface, authentication flows, vault encryption boundaries, and admin isolation.

Remediation. Critical and high findings are fixed first, before any other work. Every finding is tracked until it is closed.

Report summaries are available to enterprise customers under NDA. Contact security@helauloom.com.

Back to security