Home/ Security

Security

This page states practices that already show up on the site or in a release note. It is not a substitute for a security questionnaire during procurement.

• The marketing site redirects HTTP to HTTPS.
• The console, documentation, and paid features require an account. Some purchases require identity verification. See theTerms.
• The Cloudpods 3.11.10 release note says the services disable TLS 1.0 and 1.1 by default, and disable algorithms such as 3DES and SHA1. That is a statement about that product version, not a third-party audit of every Yunion system.
• Credentials we have already published are onCertifications.

To report a vulnerability, email info@yunion.cn with the subject “Security vulnerability” and steps to reproduce. Please do not publish exploit details before we confirm a fix. This is not a paid bounty program.