SECURITY Last updated: 15 September 2025 · Report a vulnerability: security@automera.lk
Security & Trust

Enterprise-grade security by default.

Your workflows contain sensitive data. We treat security as a first-class feature — not an afterthought.

Our pillars

Three pillars of platform security

Encryption everywhere

Every byte of data is protected both in transit and at rest using industry-standard algorithms.

  • TLS 1.3 for all network traffic
  • AES-256 encryption at rest
  • Encrypted database backups
  • Hashed & salted password storage (bcrypt)

Access control

Every action is governed by role-based access. Nobody sees more than they need.

  • 3 role levels: Admin, Manager, Operator
  • Least-privilege access by default
  • Session-based authentication
  • SSO / SAML on Enterprise plans

Audit & governance

Every action, every approval, every change — immutably logged and exportable.

  • Immutable audit trail
  • Who, what, when, from where
  • CSV export for compliance teams
  • Retention controls per plan
Best practices

How we protect our platform

Hardened infrastructure

Servers run on hardened operating systems with minimal attack surface and regular patch cycles.

Secure development lifecycle

Every code change passes review, static analysis, and automated tests before deployment.

Dependency scanning

Automated scanning for known vulnerabilities in our open-source dependencies every week.

Network isolation

Production databases are isolated from public networks with strict firewall rules.

Backups & recovery

Daily encrypted backups with tested restore procedures and a defined RPO of 24 hours.

Employee access controls

Our own team uses SSO, MFA, and just-in-time access for production systems.

Incident response plan

Documented procedures for detection, containment, notification, and post-mortem analysis.

Data residency options

Enterprise customers can choose to have data stored in specific regions on request.

Found a vulnerability?

We take responsible disclosure seriously. If you believe you've found a security issue in Automera, please report it privately to us. We acknowledge every valid report within 48 hours and credit researchers who request it.

security@automera.lk

We respect your privacy

We use cookies to run the site, understand how it's used, and improve your experience. Read our Privacy Policy.