Security & Trust
Built to pass
your security review.
Security isn't a feature we added — it's the foundation kinetic8 is built on. From encryption to zero-knowledge discovery, here's how we protect your data.
Compliance
Certifications & frameworks
Controls aligned to the SOC 2 Trust Services Criteria.
Information security management aligned to ISO 27001:2022.
Data protection by design for EU personal data.
Aligned to the Saudi Personal Data Protection Law.
Mapped to NCA ECC and CBB control requirements.
How we protect your data
Security by design
Encryption everywhere
All data is encrypted in transit with TLS 1.2+ and at rest using industry-standard AES-256. Secrets are managed through a dedicated secrets manager, never stored in source control.
Zero-knowledge connector gateway
On-prem discovery runs through an outbound-only connector secured with mutual TLS. There are no inbound firewall rules to open, and the connector architecture is designed so sensitive internal data stays within your environment.
Granular RBAC, SSO & MFA
Fine-grained, role-based permissions govern every action. Enterprise SSO and multi-factor authentication (TOTP with backup codes) protect access, with session and origin enforcement built in.
Tenant isolation
Multi-tenant deployments use schema-per-tenant isolation — each customer gets a fully segregated data environment, not just row-level separation.
Immutable audit trail
Every privileged and data-affecting action is captured in an action-typed audit trail with full attribution, giving you complete, exportable evidence for investigations and compliance.
Flexible, secure deployment
Run kinetic8 in SaaS, on-premises, hybrid, or fully air-gapped environments with zero internet egress required — suitable for classified, regulated, and high-security networks.
Responsible disclosure
Report a vulnerability
We welcome reports from the security community. If you believe you've found a security vulnerability in kinetic8, please disclose it responsibly so we can investigate and remediate quickly. We commit to acknowledging legitimate reports and keeping you informed throughout the process.
security@kinetic8.aiReady to see your
entire attack surface?
Request a live demo — we'll map your attack surface live, in the session.