Access management
Review organization members, teams, and the permissions available for your WhoDB deployment.
Review the implementation
Security / Control and visibility
Control access. Keep data accountable.
Review access management, credential handling, and deployment controls against the requirements of your own environment.
Credential handling
The self-hosted installation guide documents encrypted credential storage and secure session cookies. Review Cloud or Managed Private handling with our team.
Review the implementation
Network boundaries
For self-hosted teams, the setup guide covers HTTPS, reverse proxies, and network restrictions. Managed deployment controls depend on your architecture.
Review the implementation
Operational visibility
Review available workflow history alongside application, proxy, and database-native logs for your environment.
Review the implementation
Security review, with evidence in scope
Evaluate the controls and documentation that apply to your edition and deployment. Ask for current evidence and agreements before making compliance decisions.
Public documentation
Published setup guidance
Installation and team setup guides describe credential storage, HTTPS configuration, session settings, and database-side access controls.
Review with our team
Deployment architecture
Map identity, network, data location, and logging requirements to the deployment model you are evaluating.
Confirm current scope
Compliance evidence and agreements
Request the current status of audit reports, privacy terms, and any regulated-workload agreements before relying on them for procurement.
Deployment and governance
- Evaluate WhoDB Cloud or a Managed Private deployment against your network and data-location requirements.
- For self-hosted WhoDB, follow the published guidance for HTTPS, secure sessions, restricted networks, and database-side permissions.
- Review identity integration, access boundaries, logging, and retention for the specific plan and deployment you choose.
Have specific security questions?
Walk through identity, network, data location, retention, and compliance requirements with our team for the deployment you are considering.
Responsible Disclosure
We take security disclosures seriously. If you discover a potential vulnerability in WhoDB, please submit a report through GitHub private vulnerability reporting.
Open a private report →