Built to be trusted with your environment

Defendermate reads your cloud through a read-only connection, keeps your data isolated, and changes nothing without your policy.

Request our security reports

Certifications

ISO 27001

Certified information security management system.

SOC 2 Type 1

Independent attestation of our security controls.

Reports are shared under NDA. Request them, and we’ll send them along with answers to your security questionnaire.

How Defendermate accesses your environment

  • Read-only connection

    You grant a read-only role in your cloud accounts. Nothing is installed on your workloads.

  • Changes only through your policy

    Nothing changes in your environment unless your policy gate allows it, and every decision is logged with the rule behind it.

  • Validation never fires an exploit

    Attack paths are proven with live checks that change nothing that persists. Exploit-level testing stays with your own tools.

  • Agents propose, the gate decides

    Verdicts and plans are computed by the platform. Agents run on your side, and any action they request is decided by your policy, not by the agent.

How your data is handled

  • Isolated per customer

    Your data is encrypted at rest and never crosses into another customer’s.

  • Credentials encrypted per customer

    Cloud credentials are encrypted with keys specific to your account.

  • Dedicated deployment

    Choose a single-tenant deployment with its own compute, database and network.

  • Shared research, separate data

    The research intelligence is shared across customers. Your environment data is not.

  • Opt-in quality signals only

    Any quality signal from your deployment is anonymized and shared only if you opt in.

  • Every fact has a source

    Each record carries where it came from and when, so every verdict traces back to its evidence.

What’s kept, and what’s only read

If a verdict, score or plan depends on it, Defendermate keeps it. If it’s situational, your agents read it live through your own tools, and it’s never stored.

Kept in your environment model

The facts behind every verdict and plan, each tagged with its source and time.

  • Findings
  • Assets and configuration
  • Identity
  • Controls
  • Detection signals
  • Patch state
  • Business context

Read live, never stored

Context your agents use while they work.

  • Change windows
  • Approvals and tickets
  • Code and infrastructure repositories
  • Chat

See every data source and what it’s used for on how Connect works.

Report a vulnerability

If you believe you’ve found a security issue in Defendermate, email security@defendermate.com with the details and steps to reproduce. We acknowledge reports promptly and keep you informed while we investigate. Please don’t access data that isn’t yours or disrupt the service while testing. Our contact details are also published in security.txt.

Bring your security review

We’ll share our reports under NDA and answer your questionnaire.

Talk to Us Try it free