trueog/glitchtip-frontend
2
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Include workstation sec

Browse Source
This commit is contained in:
David Burke committed 2025-11-20 16:28:08 -05:00
1 parent 92d74ca008
commit 38d1216306
1 file changed
+6
Download Patch File Download Diff File Expand all files Collapse all files
projects/marketing/public/documentation/hosted-architecture.md
+6
View File
@@ -32,6 +32,12 @@ Burke Software functions as a data processor. We do not sell or share user data
- Audit Trails: Infrastructure changes are managed via OpenTofu (Infrastructure as Code). All access requests and infrastructure changes are version-controlled and logged via GitLab. - Audit Trails: Infrastructure changes are managed via OpenTofu (Infrastructure as Code). All access requests and infrastructure changes are version-controlled and logged via GitLab.
- Authentication: Administrative access to hosting environments requires Single Sign On (SSO) and hardware-backed Two-Factor Authentication (2FA/YubiKey). - Authentication: Administrative access to hosting environments requires Single Sign On (SSO) and hardware-backed Two-Factor Authentication (2FA/YubiKey).
### Workstation Security
- Encryption: All employee workstations utilize Full Disk Encryption (e.g., LUKS) to prevent unauthorized data access in the event of theft or loss.
- Auto-Lock: Workstations are configured to automatically lock after a short period of inactivity.
- Endpoint Protection: Development machines are kept up-to-date with the latest security patches and utilize local firewall restrictions.
### Application Security ### Application Security
- CSP & Headers: GlitchTip utilizes strict Content Security Policy (CSP), HSTS, and Secure Cookies. - CSP & Headers: GlitchTip utilizes strict Content Security Policy (CSP), HSTS, and Secure Cookies.