Site24x7 - Security

Site24x7 is a service by Zoho Corporation. Our software is managed and hosted on the same data centers that deliver other Zoho and ManageEngine services and are subject to the same security controls and compliance coverage. An overview of our approach to security and compliance certifications are listed below. Click the section for more detail on specific areas.

Infrastructure Security

End-to-end multi-layered safeguards. This includes physical data center security, access management, distributed grid architecture, secure server machines, and DDoS protection.

Learn more

Data Security

OWASP based application security framework, SSL/TLS support, in-house KMS services, and AES-256 encryption standard helps secure customer data both in transit and rest.

Learn more

Compliance

Our security standards, information security controls, and PII processing are strictly audited and adhere to industry standards like ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, and GDPR.

Learn more

Bug Bounty

Help us protect user privacy and improve security. If you are a security researcher or an ethical hacker and if you believe you have discovered a vulnerability, please report it to our bug bounty program.

How can I file a report
  • Sign up for the bug bounty program.
  • In the bugbounty console, choose "Submit bug". For department choose "Zoho" and select "Site24x7" as the service name.
  • Fill out the rest of the form with details on the vulnerability, including CVSS, steps to reproduce, and POC.

If this a valid vulnerability report, it may be applicable for a reward as per our guidelines.