Incident Response

Security incidents are tracked with affected systems, classifications, timeline, and mitigation status. We do not publish automatic breach determinations or legal conclusions. Enterprise Regulated customers receive contractually agreed incident notifications through their defined contacts.

A formal incident-response plan with exercises and post-incident reviews is in development. Report vulnerabilities to security@fortaify.com. This monitored mailbox is managed by our security and engineering lead. Current disclosure contact details are published in security.txt.