Search results

Compared to on-premises data storage, cloud computing comes with a lot of benefits. On-demand access to company data, flexibility, and... Cloud Security What is a Cloud Security Assessment? (and How to Perform One) Rony Moshkovich 2 min read Rony Moshkovich Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 7/12/23 Published Compared to on-premises data storage, cloud computing comes with a lot of benefits. On-demand access to company data, flexibility, and fast collaboration are just a few. But along with these advantages come increased security risks. To manage them, companies should invest in regular cloud security assessments. What Is a Cloud Security Risk Assessment? A cloud security assessment evaluates the potential vulnerabilities of an organization’s cloud environment. These assessments are essential to mitigate risks and ensure the continued security of cloud-based systems. By looking at cloud applications, services, and data, companies can better understand the biggest threats to their cloud environment. By managing these threats, businesses can avoid costly workflow interruptions. A security assessment can be done by an organization’s internal security team or by an outside security expert. This can happen one time only, or it can be done regularly as part of an organization’s overall cybersecurity plan. How Do Cloud Security Risk Assessments Protect Your Business? Cloud-based systems and services are an essential part of most businesses nowadays. Unfortunately, what makes them convenient is also what makes them vulnerable to security threats. A cloud security risk assessment helps organizations find out what might go wrong and prevent it from happening. It also helps with prioritizing and managing the most serious issues before they become full-on data breaches. One way assessments do this is by identifying misconfigurations. Cloud misconfigurations are behind many security breaches. They result from errors introduced by network engineers working on early cloud systems. A cloud security assessment earmarks these and other outmoded security features for repair. What’s more, cloud security assessments identify third-party risks from APIs or plugins. When your company identifies risks and manages permissions, you keep your cloud environment safe. By mitigating third-party risks, you can still benefit from outside vendors. Of course, none of this information is valuable without employee education. Employees need to know about risks and how to stop them; this is the best way to reduce the number of security incidents caused by human error or carelessness. To put it simply, a cloud security assessment helps your business run smoothly. When you know the risks your company faces and can manage them, you reduce the impact of security-related incidents. That means you can recover faster and get back to work sooner. 7 Benefits of Cloud Security Risk Assessments Cloud security risk assessments provide lots of benefits. They can help you: Improve cloud security posture . Understanding the ins and outs of a cloud-based system helps organizations plan better. For example, they can modify their security budget or improve their risk management strategy based on the results. Uncover security vulnerabilities . Cloud security assessments pinpoint weak spots. This includes misconfigurations , access control issues, and missing multi-factor authentications (MFAs). Once identified, organizations can fix the issues and avoid security breaches. Develop a more secure multi-cloud environment . Most organizations use multiple cloud platforms. Usually, this involves private or public clouds or a combination of both. This is ideal from a financial and agility perspective. But every extra layer in a cloud environment introduces potential risks. A cloud security assessment is essential in identifying these cross-cloud threats. Achieve compliance with industry standards and regulatory bodies . Ensuring compliance with GDPR, PCI-DSS, and HIPAA helps protect organizations from millions of dollars of potential fines . Manage your reputation. A sensitive data leak or other cloud security incident damages a company’s reputation. Think of companies like Target, Facebook, and LinkedIn. All have faced backlash after security breaches . Conducting cloud security assessments shows that organizations value customer and stakeholder privacy. Detect past threats . A cloud security assessment looks for things that might be wrong with the way your cloud system is set up. It can also help you find out if there have been any past security problems. By doing this, you can see if someone has tried to tamper with the security of your cloud system in the past, which could signal a bigger problem. Increase efficiency . Cloud security assessments show you which security measures are working and which aren’t. By getting rid of security tools that aren’t needed, employees have more time to work on other tasks. Cost savings . The most compelling reason to run a cloud security assessment is that it helps save money. Cost savings come from eliminating unnecessary security measures and from missed work time due to breaches. What Risks Do Cloud Security Assessments Look For? Cloud security assessments focus on six areas to identify security vulnerabilities in your cloud infrastructure: overall security posture, access control and management, incident management, data protection, network security, and risk management and compliance. Some specific risks cloud security assessments look for include: Cloud Misconfigurations Misconfigurations are one of the most common threats to overall security posture. In fact, McAfee’s enterprise security study found that enterprises experience 3,500 security incidents per month because of misconfigurations. From improperly stored passwords to insecure automated backups, misconfiguration issues are everywhere. Because they’re so common, fixing this issue alone can reduce the risk of a security breach by up to 80%, according to Gartner . Access Control and Management Problems This assessment also highlights ineffective access control and management. One way it does this is by identifying excessive network permissions. Without the proper guardrails (like data segmentation) in place, an organization’s attack surface is greater. Plus, its data is at risk from internal and external threats. If an employee has too much access to a company’s network, they might accidentally delete or change important information. This could cause unintended system problems. Additionally, if hackers get access to the company’s network, they could easily steal important data. Cloud security assessments also look at credentials as part of user account management. A system that uses only static credentials for users or cloud workloads is a system at risk. Without multifactor authentication (MFA) in place, hackers can gain access to your system and expose your data. Improper Incident Management and Logging When it comes to incident management, a cloud security assessment can reveal insufficient or improper logging — problems that make detecting malicious activities more difficult. Left unchecked, the damage is more severe, making recovery more time-consuming and expensive. Insufficient Data and Network Security Data protection and network security go hand in hand. Without proper network controls in place (for example firewalls and intrusion detection), data in the cloud is vulnerable to attack. A cloud security assessment can identify gaps in both areas. Based on the results of a cloud security assessment, a company can make a risk management plan to help them react as quickly and effectively as possible in the event of an attack. The last aspect of cloud security the assessment looks at is compliance with industry standards. 7 Steps To Perform a Cloud Security Assessment The main components of cloud security assessments include: Identifying your cloud-based assets, discovering vulnerabilities through testing, generating recommendations, and retesting once the issues have been addressed. The steps to performing a cloud security assessment are as follows: Step One: Define the project Get a picture of your cloud environment. Look at your cloud service providers (CSPs), third-party apps, and current security tools. First, decide which parts of your system will be evaluated. Next, look at the type of data you’re handling or storing. Then consider the regulations your business must follow. Step Two: Identify potential threats Look at both internal and external threats to your cloud-based system. This could include endpoint security, misconfigurations, access control issues, data breaches, and more. Then figure out how likely each type of attack is. Finally, determine what impact each attack would have on your business operations. Step Three: Examine your current security system Look for vulnerabilities in your existing cloud security. In particular, pay attention to access controls, encryption, and network security. Step Four: Test Penetration testing, port scanners, and vulnerability scanners are used to find weaknesses in your cloud environment that were missed during the original risk assessment. Step Five: Analyze Look at the results and determine which weaknesses need immediate attention. Deal with the issues that will have the biggest impact on your business first. Then, focus on the issues most likely to occur. Finish by handling lower-priority threats. Step Six: Develop an action plan Come up with a time-bound remediation plan. This plan should spell out how your organization will deal with each security vulnerability. Assign roles and responsibilities as part of your incident response program. Depending on the results, this could include updating firewalls, monitoring traffic logs, and limiting access control. Step Seven: Maintain Cloud security assessments can be done as a one-off, but it’s much better to monitor your systems regularly. Frequent monitoring improves your organization’s threat intelligence. It also helps you identify and respond to new threats in real time. Getting Help With Your Cloud Security Assessment Cloud security assessment tools are used to identify vulnerabilities in a cloud infrastructure which could lead to data loss or compromise by attackers. As an agentless cloud security posture management (CSPM) tool , Prevasio helps identify and fix security threats across all your cloud assets in minutes. Our deep cloud scan checks for security weaknesses, malware, and compliance. This helps ensure that your company’s cloud environment is protected against potential risks. But any CSPM can do that . Prevasio is the only solution that provides container security dynamic behavior analysis. Our technology spots hidden backdoors in your container environments. It also identifies supply chain attack risks. Paired with our container security static analysis for vulnerabilities and malware, your containers will never be safer. Our CSPM works across multi-cloud, multi-accounts, cloud-native services , and cloud assets. Whether you’re using Microsoft Azure, S3 buckets in AWS, or Cosmos DB in GCP, Prevasio is the security system your company has been looking for. But we do more than identify security threats. We increase your team’s efficiency. How? By providing a prioritized list of cloud risks ranked according to CIS benchmarks. That means no more uncertainty about what needs to get done. Our easy-to-understand results help your team concentrate on the most important things. This saves time and money by reducing the need for extra administrative work. A Final Word on Cloud Security Assessments Performing regular cloud security assessments helps your business spot security issues before they become major problems. When you reinforce your security controls and define your incident response plan, you make your organization more efficient. Plus, you keep things going even when issues arise. Put together, these proactive measures can save you money. Sign up today and see how Prevasio can help your team ! FAQs About Cloud Security Assessments What are the four areas of cloud security? The four pillars of cloud security are data availability, data confidentiality, data integrity, and regulatory compliance. What is included in a security assessment? Cloud security assessments include: Identifying your cloud-based assets, discovering vulnerabilities through testing, generating recommendations, and retesting once the issues have been addressed. Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

Network vulnerability scanning provides in-depth insight into your organization’s security posture and highlights the specific types of... Network Security 5 Best Network Vulnerability Scanning Tools in 2024 Tsippi Dach 2 min read Tsippi Dach Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 2/11/24 Published Network vulnerability scanning provides in-depth insight into your organization’s security posture and highlights the specific types of vulnerabilities attackers may exploit when targeting it. These tools work by systematically scanning your network environment — including all desktops, laptops, mobile endpoints, servers, and other assets for known weaknesses and misconfigurations. Your analyzer then produces a detailed report that tells you exactly how hackers might breach your systems. Find out how these important tools contribute to successfully managing your security policies and protecting sensitive assets from cybercriminals and malware. What is Network Vulnerability Management? Network vulnerability scanners are cybersecurity solutions typically delivered under a software-as-a-service (SaaS) model. These solutions match your network asset configurations with a comprehensive list of known misconfigurations and security threats, including unpatched software, open ports, and other security issues. By comparing system details against a comprehensive database of known vulnerabilities, network scanning helps pinpoint areas of weakness that could potentially be exploited by threat actors. This proactive approach is essential for maintaining robust network security and protecting sensitive data from unauthorized access and cyberattacks. This provides your organization with several valuable benefits: Early detection of known security vulnerabilities. If your organization is exposed to security threats that leverage known vulnerabilities, you’ll want to address these security gaps as soon as possible. Comprehensive data for efficient risk management. Knowing exactly how many security vulnerabilities your organization is exposed to gives you clear data for conducting in-depth risk management . Regulatory compliance. Many regulatory compliance frameworks like SOC 2, ISO 27001, and PCI DSS require organizations to undergo regular vulnerability scanning. Reduced costs. Automating the process of scanning for vulnerabilities reduces the costs associated with discovering and remediating security weaknesses manually. Key Features and Functions The best network security vulnerability scanners have several important features in common: Prioritized vulnerability assessment tools. You need to be able to assess and prioritize vulnerabilities based on their severity. This allows you to commit security resources to addressing high-priority vulnerabilities first, and taking care of low-impact weaknesses afterwards. Automation and real-time analysis. Manual scanning is a difficult and time-consuming process. Your vulnerability scanner must support automated, ongoing scanning for real-time vulnerability detection, providing on-demand insights into your security risk profile. Integration with remediation tools: The best network vulnerability scanners integrate with other security tools for quick mitigation and remediation. This lets security teams quickly close security gaps and move on to the next, without having to spend time accessing and managing a separate set of security tools. How Network Vulnerability Scanning Tools Work Step 1. Scanning Process Initial network mapping is the first step in the vulnerability scanning process. At this point, your scanner maps your entire network and identifies every device and asset connected to it. This includes all web servers, workstations, firewalls , and network devices. The automatic discovery process should produce a comprehensive map showing how your network is connected, and show detailed information about each network device. It should include comprehensive port scanning to identify open ports that attackers could use to gain entry to the network. Step 2. Detection Techniques The next step in the process involves leveraging advanced detection techniques to identify known vulnerabilities in the network. Most network vulnerability scanners rely on two specific techniques to achieve this: Signature-Based Detection: The scanner checks for known vulnerabilities by comparing system details against a database of known issues. This database is drawn from extensive threat intelligence feeds and public records like the MITRE CVE Program . Heuristic Analysis: This technique relies on heuristic and behavioral techniques to identify unknown or zero-day vulnerabilities based on unusual system behavior or configurations. It may detect suspicious activities that don’t correspond to known threats, prompting further investigation. Step 3. Vulnerability Identification This step involves checking network assets for known vulnerabilities according to their unique risk profile. This includes scanning for outdated software and operating system versions, and looking for misconfigurations in network devices and settings. Most network scanners achieve this by pinging network-accessible systems, sending them TCP/UDP packets, and remotely logging into compatible systems to gather detailed information about them. Highly advanced network vulnerability scanning tools have more comprehensive sets of features for identifying these vulnerabilities, because they recognize a wider, more up-to-date range of network devices. Step 4. Assessment and Reporting This step describes the process of matching network data to known vulnerabilities and prioritizing them based on their severity. Advanced network scanning devices may use automation and sophisticated scripting to produce a list of vulnerabilities and exposed network components. First, each vulnerability is assessed for its potential impact and risk level, often based on industry-wide compliance standards like NIST. Then the tool prioritizes each vulnerability based on its severity, ease of exploitation, and potential impact on the network. Afterwards, the tool generates a detailed report outlining every vulnerability assessed and ranking it according to its severity. These reports guide the security teams in addressing the identified issues. Step 5. Continuous Monitoring and Updates Scanning for vulnerabilities once is helpful, but it won’t help you achieve the long-term goal of keeping your network protected against new and emerging threats. To do that, you need to continuously monitor your network for new weaknesses and establish workflows for resolving security issues proactively. Many advanced scanners provide real-time monitoring, constantly scanning the network for new vulnerabilities as they emerge. Regular updates to the scanner’s vulnerability database ensure it can recognize the latest known vulnerabilities and threats. If your vulnerability scanner doesn’t support these two important features, you may need to invest additional time and effort into time-consuming manual operations that achieve the same results. Step 6. Integration with Other Security Measures Security leaders must pay close attention to what happens after a vulnerability scan detects an outdated software patch or misconfiguration. Alerting security teams to the danger represented by these weaknesses is only the first step towards actually resolving them, and many scanning tools offer comprehensive integrations for launching remediation actions. Remediation integrations are valuable because they allow security teams to quickly address vulnerabilities immediately upon discovering them. The alternative is creating a list of weaknesses and having the team manually go through them, which takes time and distracts from higher-impact security tasks. Another useful integration involves large-scale security posture analytics. If your vulnerability assessment includes analysis and management tools for addressing observable patterns in your network vulnerability scans, it will be much easier to dedicate resources to the appropriate security-enhancing initiatives. Choosing a Network Vulnerability Scanning Solution There are two major categories of features that network vulnerability scanning tools must offer in order to provide best-in-class coverage against sophisticated threats. Keep these aspects in mind when reviewing your options for deploying vulnerability scans in your security workflow. Important Considerations Comprehensive Vulnerability Database. Access to an extensive CVE database is vital. Many of these are open-source and available to the general public, but the sheer number of CVE records can drag down performance. The best vulnerability management tools have highly optimized APIs capable of processing these records quickly. Customizability and Templates. Tailoring scans to specific needs and environments is important for every organization, but it takes on special significance for organizations seeking to demonstrate regulatory compliance. That’s because the outcome of compliance assessments and audits will depend on the quality of data included in your reports. False Positive Management. All vulnerability scanners are susceptible to displaying false positives, but some manage these events better than others. This is especially important in misconfiguration cases, because it can cause security teams to mistakenly misconfigure security tools that were configured correctly in the first place. Business Essentials Support for Various Platforms. Your vulnerability scan must ingest data from multiple operating systems like Windows, Linux, and a variety of cloud platforms. If any of these systems are not compatible with the scanning process, you may end up with unstable performance or unreliable data. Reporting and Analytics. Detailed reports and analytics help you establish a clear security posture assessment. Your vulnerability management tool must provide clear reports that are easy for non-technical stakeholders to understand. This will help you make the case for necessary security investments in the future. Scalability and Flexibility. These solutions must scale with the growth of your organization’s IT infrastructure . Pay attention to the usage and payment model each vulnerability scanning vendor uses. Some of them may be better suited to small, growing organizations while others are more appropriate for large enterprises and government agencies. Top 5 Network Vulnerability Scanning Providers 1. AlgoSec AlgoSec is a network security platform that helps organizations identify vulnerabilities and orchestrate network security policies in response. It includes comprehensive features for managing firewalls routers , and other security device configurations, and enables teams to proactively scan for new vulnerabilities on their network. AlgoSec reports on misconfigurations and vulnerabilities, and can show how simulated changes to IT infrastructure impact the organization’s security posture. It provides in-depth visibility and control over multi-cloud and on-premises environments. Key features: Comprehensive network mapping. AlgoSec supports automatic network asset discovery, giving security teams complete coverage of the hybrid network. In-depth automation. The platform supports automatic security policy updates in response to detected security vulnerabilities, allowing security teams to manage risk proactively. Detailed risk analysis. When AlgoSec detects a vulnerability, it provides complete details and background on the vulnerability itself and the risk it represents. 2. Tenable Nessus Tenable Nessus is one of the industry’s most reputable names in vulnerability assessment and management. It is widely used to identify and fix vulnerabilities including software flaws, missing security patches, and misconfigurations. It supports a wide range of operating systems and applications, making it a flexible tool for many different use cases. Key features: High-speed discovery. Tenable supports high speed network asset discovery scans through advanced features. Break up scans into easily managed subnetworks and configure ping settings to make the scan faster. Configuration auditing. Security teams can ensure IT assets are compliant with specific compliance-oriented audit policies designed to meet a wide range of assets and standards. Sensitive data discovery. Tenable Nessus can discover sensitive data located on the network and provide clear, actionable steps for protecting that data in compliance with regulatory standards. 3. Rapid7 Nexpose Nexpose offers real-time monitoring and risk assessment designed for enterprise organizations. As an on-premises vulnerability scanner, the solution is well-suited to the needs of large organizations with significant IT infrastructure deployments. It collects vulnerability information, prioritizes it effectively, and provides guidance on remediating risks. Key Features: Enterprise-ready on-premises form factor. Rapid7 designed Nexpose to meet the needs of large organizations with constant vulnerability scanning needs. Live monitoring of the attack surface. Organizations can continuously scan their IT environment and prioritize discovered vulnerabilities using more than 50 filters to create asset groups that correspond to known threats. Integration with penetration testing. Rapid7 comes with a wide range of fully supported integrations and provides vulnerability and exploitability context useful for pentest scenarios. 4. Qualys Qualys is an enterprise cloud security provider that includes vulnerability management in its IT security and compliance platform. It includes features that help security teams understand and manage security risks while automating remediation with intuitive no-code workflows. It integrates well with other enterprise security solutions, but may not be accessible for smaller organizations. Key features: All-in-one vulnerability management workflow . Qualys covers all of your vulnerability scanning and remediation needs in a single, centralized platform. It conducts asset discovery, detects vulnerabilities, prioritizes findings, and launches responses with deep customization and automation capabilities. Web application scanning . The platform is well-suited to organizations with extensive public-facing web applications outside the network perimeter. It supports container runtime security, including container-as-a-service environments. Complete compliance reporting . Security teams can renew expiring certificates directly through Qualys, making it a comprehensive solution to obtaining and maintaining compliance. 5. OpenVAS (Greenbone Networks) OpenVAS is an open-source tool that offers a comprehensive scanning to organizations of all sizes. It is available under a General Public License (GPL) agreement, making it a cost-effective option compared to competing proprietary software options. It supports a range of customizable plugins through its open source developer community. Key Features: Open-source vulnerability scanner. Organizations can use and customize OpenVAS at no charge, giving it a significant advantage for organizations that prioritize cost savings. Customizable plugins. As with many open-source tools, there is a thriving community of developers involved in creating customizable plugins for unique use cases. Supports a wide range of vulnerability tests . The high level of customization offered by OpenVAS allows security teams to run many different kinds of vulnerability tests from a single, centralized interface. Honorable Mentions Nmap (Network Mapper): A versatile and free open-source tool, NMAP is popular for network discovery and security auditing. It’s particularly noted for its flexibility in scanning both large networks and single hosts. Nmap is a powerful and popular Linux command-line tool commonly featured in cybersecurity education courses. Microsoft’s Azure Security Center: Ideal for organizations heavily invested in the Azure cloud platform, this tool provides integrated security monitoring and policy management across hybrid cloud workloads. It unifies many different security features, including vulnerability assessment, proactive threat hunting, and more. IBM Security QRadar Vulnerability Manager: This is a comprehensive solution that integrates with other IBM QRadar products, providing a full-spectrum view of network vulnerabilities. It’s especially valuable for enterprises that already rely on IBM infrastructure for security workflows. McAfee Vulnerability Manager: A well-known solution offering robust vulnerability scanning capabilities, with additional features for risk and compliance management. It provides a combination of active and passive monitoring, along with penetration testing and authentication scanning designed to provide maximum protection to sensitive network assets. Choosing the Right Vulnerability Management Tool Choosing the right vulnerability management tool requires in-depth knowledge of your organization’s security and IT infrastructure context. You need to select the tool that matches your unique use cases and security requirements while providing the support you need to achieve long-term business goals. Those goals may change over time, which makes ongoing evaluation of your security tools an even more important strategic asset to keep in your arsenal. Gathering clear and detailed information about your organization’s security posture allows you to flexibility adapt to changes in your IT environment without exposing sensitive assets to additional risk. AlgoSec provides a wide range of flexible options for vulnerability scanning, policy change management, and proactive configuration simulation. Enhance your organization’s security capabilities by deploying a vulnerability management solution that provides the visibility and flexibility you need to stay on top of a challenging industry. Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

Cisco and AlgoSec Partner solution brief- Better together for network segmentation Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Strategic playbook Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Migrating Policies To Cisco ACI Policy Portability Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Learn how ESG principles are driving sustainable environmental strategies Discover how companies integrate ESG to reduce footprint and contribute to a greener future Our environmental strategy Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue Environmental commitment and vision AlgoSec recognizes the importance of protecting the environment, we at AlgoSec are committed to reducing our carbon footprint and our waste by efficiently coding our product. For minimal environmental impact, the company has defined a long-term strategy, which includes working towards reinforcing its reduction goals and strengthening them through information and employee awareness. Our goal AlgoSec is determined to reduce our environmental impact, by striving to decrease the GHG emissions from our worldwide operations and from our products (as applicable), thus ensuring a safer and more sustainable future for us all. We are continuously looking for ways to maximize energy efficiency while minimizing water consumption and waste accumulation throughout our operations. Our next steps We are committed to infusing as part of our business plan strategic actions to advance reduction in GHG emissions, as part of Scope 1&2. We will continue to reduce our environmental impact by monitoring our progress and taking strategic actions to help achieve our goals. What we have achieved so far Implementation of a worldwide hybrid model since 2020, thus inducing a reduction in emissions spent on employee commuting, as well as electricity usage and water consumption. Waste management program – Reduce trash and the use of plastic at the office, in addition to recycling or reusing 99% of our electronic waste Raising employee awareness of effective use of energy in the office Product sustainability – we strive to increase the energy efficiency of our products by advanced product coding. Certification Verification Statement for GHG Scope 1&2: Additional related links: AA1000AS Reports | Accountability Global Sustainability Consultancy and Standards New York, London, Dubai, Riyadh BDO has conducted the assurance for AlgoSec Greenhouse Gas inventory for scopes 1 and 2 according to GHG protocola The assurance procedure was done according to the disclosures required by the AccountAbility AA1000AS v3 standard and the ISO 14064-3 verification methodology. The assurance process was conducted professionally, impartially and independently.

ALGOSEC DESIGNATED SUPPORT ENGINEER Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

AlgoSec partner program Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Azure security best practices checklist Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Webinars Build and Enforce Defense in-Depth | An AlgoSec-Cisco Tetration webinar Micro-segmentation protects your workloads and applications against lateral movement of malware and limits the spread of insider threats, yet successfully implementing a defense-in-depth strategy using micro-segmentation is complicated. In this technical webinar, Jothi Prakash Prabakaran, Senior Product Manager at Cisco, and Yoni Geva, Product Manager at AlgoSec, will provide a step-by-step blueprint to implementing this strategy using the micro-segmentation capabilities of Cisco Tetration and network security policy management capabilities of AlgoSec. They will demonstrate how to tighten your security posture within the data center using an allow-list approach. They will also show how to enforce these granular micro-segmented policies enforced on the workloads with Cisco Tetration and a coarse grain policy enforced across the infrastructure through AlgoSec network security policy management. Watch the webinar to learn how to: Understand your business applications to create your micro-segmentation policy Validate your micro-segmentation policy is accurate Enforce these granular policies on workloads and summarized policies across your infrastructure Use risk and vulnerability analysis to tighten your workload and network security Identify and manage security risk and compliance in your micro-segmented environment July 22, 2020 Jothi Prakash Prabakaran Yoni Geva Product Manager Relevant resources AlgoSec Joins Cisco’s Global Price List Keep Reading Introducing Deeper Integration with Cisco’s Tetration Keep Reading Application Segmentation With Cisco Tetration and AlgoSec Read Document Choose a better way to manage your network Choose a better way to manage your network Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Across cloud, SDN, on premises and anything in between one platform to manage your entire network security policy Discover the value of Double layered cloud security With Prevasio's agentless CNAPP offering across your CI/CD pipeline to runtime Schedule a demo Free trial Seeing the unseen in your cloud Unlock the secrets of your cloud. Explore your cloud's hidden depths - uncover every resource and relationship. Targeted defense: prioritize & protect Safeguard your business by adopting a proactive approach to cloud security. Our targeted defense strategy helps you identify and neutralize the most urgent threats, keeping your cloud environment secure and resilient. Cloud compliance simplified: proof of security Effortlessly demonstrate continuous compliance with industry standards and regulations, ensuring your cloud environment meets the highest security requirements. Stay one step ahead: detect and defend threats Stay ahead of cloud threats with continuous monitoring and actionable insights. Our advanced technology identifies and prioritizes vulnerabilities, empowering you to focus on what matters most. Secure from the start: Infrastructure-as-Code (IaC) scanning Secure your cloud infrastructure before it's even built. Our IaC scanning detects vulnerabilities early in the development cycle, saving you time, money, and headaches down the road. Ready for a deep dive? Equip yourself with the technical details to discuss with your team and managers Contact Us Got everything you need?
Here’s how you get started Learn more Prevasio Security Here’s how we secure our Prevasio solution Learn more Get the latest insights from the experts What is a Cloud Security Assessment? Read blog Shaping tomorrow: Leading the way in cloud security Read blog CSPM importance for CISOs. What security issues can be prevented\defended with CSPM? Read blog Schedule time and secure your cloud Schedule time and secure your cloud Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue Schedule time and secure your cloud

Read Algosec's Privacy Notice to learn how we collect, use, and protect your personal data in compliance with global privacy regulations. AlgoSec’s privacy statement On our Web site, we only collect, store and use personal information relating to you with your permission. You may choose to reveal information to us if, for example, you are registered to our customer portal or complete a survey. AlgoSec may use the information internationally in connection with processing your inquiries and orders or to help improve our products and services. We do not share such information with third parties, except as required by the applicable law, to enforce our Terms of Use, or to protect personal safety, the public, or our website. Personal information collected through the Sites is used solely for the purposes described below. Use and Purpose of Collected Personal Information By using the Sites, you consent to the collection and use of information terms set forth herein. Consent AlgoSec Inc. and its wholly owned subsidiaries (“AlgoSec”, “we” or “us”) has created this privacy notice to demonstrate our firm commitment to secure and trustworthy Internet commerce and the individual’s right to privacy. This Privacy Notice sets AlgoSec’s privacy policies and practices in relation to information that is collected by us through AlgoSec’s website (www.algosec.com ), through AlgoSec’s learning platform, and through AlgoSec’s social media pages located at http://www.facebook.com/AlgoSec; http://twitter.com/algosec; https://www.youtube.com/user/AlgoSec; http://www.linkedin.com/company/algosec; https://www.brighttalk.com/channel/11873/algosec; and emails (website, social media pages and emails, collectively “Sites”), or otherwise, as detailed below. An IP Address may be identified and logged automatically in our server log files whenever you access the Sites, along with the time of the visit and the page(s) that you visited. We collect IP addresses to calculate usage levels of the Sites, to help diagnose problems with our Sites, to administer our Web site, and to gather demographic information regarding navigation to the Sites. When you visit our site, we recognize only your domain name and not your e-mail address. We will see your e-mail address only if you give it to us, voluntarily, by filling out a “contact us” and/or a similar form in the website or by sending us an e-mail message. What personal information do we collect and why? IP Addresses E-mail Addresses If you choose to give us your e-mail address, through the website, or in an event, we will communicate with you via e-mail. We do not share your e-mail address with others outside AlgoSec. Depending on how your e-mail application is set up, information about your use of the email sent by us may be transmitted automatically when you receive, open and/or click on an e-mail from AlgoSec. In any event, you may opt out from receipt of any additional e-mails from AlgoSec at any time. Corporate Contacts and Position (a) Algosec may, in addition to the foregoing, also collect your corporate contacts and position with your organization, if you so choose to provide it (either in an event, convention or otherwise). (b) The rights granted to you herein shall also apply to such information, and you are kindly advised to contact us for any question / request in that respect. Our Social Media Sites Some of our Sites are pages that we maintain on third party platforms (such as our Facebook and LinkedIn pages), and operated by them, and as such, your use and browsing of such pages are subject to the privacy policy and terms and conditions of the operators of such pages, over which we have no control. Cookies and Pixels What are Cookies? (a) Cookies are small data files downloaded and stored on a user’s device while browsing a website, often used to keep record of actions taken on such website or track related browsing activity. (b) For additional information regarding Cookies and the way to control them, please check out the Help file of your browser or visit http://www.aboutcookies.org We use Cookies for the following purposes: (a) General analysis. (b) Marketing purposes and automation tools. (c) Improvement of the browsing of our Sites (including content displayed), and your use of our online forms. AlgoSec may use, from time to time, third party vendors for provision of services when you provide your contact details to AlgoSec. Such third party vendors may collect data on AlgoSec’s website users’ behavior and their devices including, but not limited to, device’s IP (which stored in a de-identified form), browser information, geographic location (country only), and preferred language used for display. Such third party vendors will not use, process or convey such information, in any manner contrary to our instructions. AlgoSec has not sold Personal Data in the preceding 12 months. AlgoSec has disclosed the following categories of Personal Data for a “Business Purpose” (as this term is defined under the California Consumer Privacy Act of 2018 “CCPA”): a) Identifiers including name, email address, IP address, etc. b) Commercial Information, including transaction history c) Geolocation Data. For additional information regarding our trusted third party providers, kindly contact us at: [email protected] Use of Information Collected by AlgoSec Third Party Service Providers Employment Candidates When submitting your CV for employment opportunities AlgoSec will retain your personal information as it appears in your CV and/or as derived from your interview, for a period of 18 months (for job postings in the EU) or indefinitely (for job postings outside of the EU) from receipt of the information by our recruiting systems. Should you wish Algosec to remove your personal information before then, please contact us at [email protected] Transfer of Data Between the AlgoSec Group Entities; Hosting Subject to applicable laws, we may allow access to your personal data for the uses described in this Privacy statement, internally, between our group entities Your Rights Regarding Your Personal Information We care about your privacy rights and enable you to exercise any of your applicable legal rights in connection with your Personal Information collected by Algosec as detailed in this Privacy statement. In order to do so, kindly contact us at [email protected] . You may withdraw from the consent you provided to AlgoSec in connection with the collection, use and processing of your personal information, at any time or ask that your personal information be removed. Please note however, that this shall not affect lawful actions we have taken in connection with your personal data prior to our receipt of your request. EU residents may a) Request to receive confirmation of whether their Personal Data is being processed. b) Request to receive a copy their Personal Data that they provided to AlgoSec c) Request that AlgoSec correct their Personal Data that AlgoSec is holding d) Request that AlgoSec erase their Personal Data e) Object to AlgoSec’s processing of their Personal Data f) Request that AlgoSec restrict processing of their Personal Data g) Lodge a complaint with their Supervisory Authority California Residents may a) Receive confirmation of whether their Personal Data is being processed and access their Personal Data that was collected by AlgoSec in the 12 months prior to the request. b) Receive a copy their Personal Data that they provided to AlgoSec in the 12 months prior to the request. c) Request that AlgoSec erase their Personal Data d) Not be discriminated due to exercising their rights under CCPA. You may let us know at any time of your desire to exercise any of said rights by contacting us at: [email protected] (please write in the subject line – Privacy statement, and in the text box – the requested action to be taken by us). General Security of Data We have reasonable technical and operational security measures in place to help protect data and information we collect and retain. However, we make no guarantees as to the safety or security of any data and/ or information collected by us, as no system can be completely secured. Links to Other Sites AlgoSec’s website may contain links to other sites. AlgoSec is not responsible for the privacy practices or the content of third parties that AlgoSec does not own or control, or of individuals that AlgoSec does not employ or manage. Changes to this Privacy Statement AlgoSec reserves the right to change, modify, add or remove portions of this Privacy statement at any time and without prior notice. However, if we change the manner in which we collect, store or otherwise use your personal information, we will provide an updated statement. Furthermore, Algosec will post the updated Privacy Statement via our website. Contact Information AlgoSec Inc. is located at 65 Challenger Rd, Suite 310, Ridgefield Park, NJ 07660 USA, Tel: +1-888-358-3696. If you have any questions about this privacy statement feel free to contact us at [email protected] (please write in the subject line – Privacy Statement). We will make every effort to reply within a reasonable timeframe during working hours. Last updated: September 2024. AlgoSec may process or otherwise use your personal information as follows: We may process your inquiries and orders or to help improve our products and services. We may use the contact information we receive from you in order to contact you regarding our products, inquiries, or otherwise provide you with additional materials regarding AlgoSec. We do not share such information with third parties, except as required by the applicable law, or in order to comply with industry privacy standards. We may also disclose your data in order to defend or enforce our legal rights according to the applicable law and/or our End User License Agreement that apply to our products. In any event information is used solely for the purposes described in this Privacy statement. Personal Information collected from our use of Cookies is not shared with any third party without your consent. Cookie opt-out: you may elect to opt-out from enabling Cookies: (a) in the browser’s settings tools, usually by choosing between several options offered by the browser (some browsers, for example, Microsoft’s Edge®, allow blocking Cookies from a specific website, and respectively you may choose to block applicable Cookies); or (b) by pressing the below button. What are pixels?
Pixels are codes which trigger the use of Cookies by us or third parties on our Sites. We use pixels for the following purposes:
We enable pixels for content suggestions and other remarketing purposes. For additional information regarding our use of pixels and Cookies, kindly contact us at: [email protected] Introduction We, AlgoSec Inc. and its wholly owned subsidiaries (the “Company,” “we,” “us,” “our”), respect the privacy and data protection rights of our website visitors, business users, and business contacts. This Privacy Notice (the "Notice") describes the personal information we collect and the policies and procedures we use regarding personal information in each of the following contexts: The data practices on our website www.algosec.com (the “Website”). Our relationship with representatives of existing and prospective customers, partners, and vendors (the “Representatives”), and the Representatives who log in to use our SaaS solution (“Portal Users”). This Notice may be amended from time to time. We will post any changes to this Notice on our Website a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you by email of the changes to the Notice if we have your email address. Contact Us If you have any questions, comments, or concerns regarding this Notice or our processing of your personal information, please contact us at [email protected] . Scenario You contact us through our Website's forms such as: Contact-us form Demo request form Partner inquiry form Expert-request form A landing page to which one of our online ad leads. Premium-content access form You provide your business card or complete a registration form in the context of a conference, trade show, or other event we present in or host. Our business relationship with customers and partners Our business relationship with vendors and service providers Purposes Our business development Our business development Administering the business and professional services relationship with customers and partners. Facilitating the provision of support to customers and partners. Administering the business and professional services relationship with customers and partners. Facilitating the provision of support to customers and partners. Facilitating the Company's use of vendors' and service providers' products and services. Examples of information processed Name, email address, your company affiliation, country and telephone number, and free-text content of your inquiry Name, title, email address, your company affiliation Name, email address, company affiliation, position, phone number, country, past communications, interest in products and services What We Collect and Why If you have any questions, comments, or concerns regarding this Notice or our processing of your personal information, please contact us at [email protected] . Introduction Contact Us What We Collect and Why Methods and Sources for Collecting Your Personal Information Sharing Your Personal Information Data Subject Rights Data Retention and Security Additional information for individuals in the EU or UK Job Applicants Additional information for individuals in the United States Introduction We, AlgoSec Inc. and its wholly owned subsidiaries (the “ Company, ” “ we, ” “ us, ” “ our ”), respect the privacy and data protection rights of our website visitors, business users, and business contacts. This Privacy Notice (the " Notice ") describes the personal information we collect and the policies and procedures we use regarding personal information in each of the following contexts: The data practices on our website www.algosec.com (the “Website” ). Our relationship with representatives of existing and prospective customers, partners, and vendors (the “ Representatives” ), and the Representatives who log in to use our SaaS solution (“ Portal Users ”). This Notice may be amended from time to time. We will post any changes to this Notice on our Website a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you by email of the changes to the Notice if we have your email address. Contact Us If you have any questions, comments, or concerns regarding this Notice or our processing of your personal information, please contact us at [email protected] . What We Collect and Why Scenario Purposes Examples of information processed You contact us through our Website's forms such as: Contact-us form Demo request form Partner inquiry form Expert-request form A landing page to which one of our online ad leads. Premium-content access form Our business development Name, email address, your company affiliation, country and telephone number, and free-text content of your inquiry. You provide your business card or complete a registration form in the context of a conference, trade show, or other event we present in or host. Our business development Name, title, email address, your company affiliation Our business relationship with customers and partners Administering the business and professional services relationship with customers and partners. Facilitating the provision of support to customers and partners. Name, email address, company affiliation, position, phone number, country, past communications, interest in products and services Our business relationship with vendors and service providers Administering the business relationship with vendors and service providers. Facilitating the Company's use of vendors' and service providers' products and services. Name, email address, company affiliation, position, phone number, country, past communications Portal Users accessing and using the Portal Administering the relationship and service agreement we have with the company (business) of the Portal User. Facilitating the provision of the Portal and support for the Portal. Name, username, email address, password, company; position; phone number; country; past communications; activities performed on the Portal Website Analytics Our business development and website improvement The webpages of the Website that you accessed or viewed, your interactions with the content on the Website, IP addresses, browser information, device identifiers, and data collected through cookies and similar technologies. We obtain your consent before placing non-essential cookies. Methods and Sources for Collecting Your Personal Information We collect personal information from several sources: Directly from you when you provide it to us through email communications, an online form, or when you give us your business card. You are not legally obligated to provide us with your personal information, but if you do not, we will be unable to handle or respond to your inquiry, maintain our business contact with you, or fulfill your request to register as a Portal User. If another representative of your organization provides us with your information. You do not have a legal duty to provide information to us. However, you will not be able to submit a request, access the Portal, or be in contact with us without providing the above information. Sharing Your Personal Information We share your information in the following scenarios: Scenario Purposes Examples of Third Parties Involved We will share your personal information with our service providers who assist us with the internal operations of our business and the Website. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their own promotional purposes. Operating the Website and our business. Amazon Web Services If you abuse your rights to use the Website or violate any applicable law in the course of doing business with us. Responding to, handling, and mitigating suspected violations of law in connection with our business. Competent authorities, legal counsel, and advisors. If a judicial, governmental, or regulatory authority requires us to disclose your information. Complying with a binding request from a competent authority. Competent authorities. If the operation of the Website or our business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition). Enabling a structural change in the operation of the Website and our business. The target entity of the merger or acquisition, legal counsel, and advisors. Data Subject Rights You have a right to access and receive a copy of your personal information that we process. You also have a right to correct inaccurate personal information we have concerning you and to have incomplete personal information completed. Data Retention and Security We retain your information for the duration necessary to operate the Website, the Portal, and our business, and to interact with customers, partners, and suppliers, and thereafter as needed for record-keeping purposes. We will retain your information for the duration needed to support our ordinary business activities, operating the Website, the Portal, and interacting with existing and potential customers, suppliers, and partners. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims, and enforce our agreements. The overall period of retention is approximately seven years. For job applicants from the European Economic Area or the UK, we will retain your personal information as a job applicant for a period of 18 months. We implement measures to secure your information We implement appropriate technical and organizational measures to secure your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, staff training, and incident response procedures. While we maintain industry-standard security practices, no system can guarantee absolute security, and we continuously work to enhance our protective measures. Additional information for individuals in the EU or UK Controller The controllers of your personal information are AlgoSec Inc. (as a parent company) and other wholly owned group companies of AlgoSec. AlgoSec Inc.’s address is 65 Challenger Rd, Suite 310, Ridgefield Park, NJ 07660, United States. International data transfers To facilitate processing your information with our service providers, we will transfer your information to countries such as the United States. For transfers to countries without adequacy decisions, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (2021/914/EU) and the UK International Data Transfer Addendum, supplemented by additional technical and organizational measures where necessary to ensure equivalent protection. Legal basis for processing your personal data Purpose or Scenario Legal Basis Responding to your inquiry which you submit through one of our website forms Contacting you after you provide us with your business card or complete a registration form in the context of a conference, trade show, or other event we present in or host. Legitimate interests in developing potential leads and responding to business inquiries Administering the business and service relationship with customers and partners. Portal Users accessing and using the Portal. Facilitating the provision of support to customers or partners. Legitimate interests in administering and performing the contractual obligations with customers and partners Administering the business relationship with vendors and service providers Legitimate interests in administering contractual obligations with service providers and vendors Website analytics Legitimate interests in gaining insights into how visitors access and use our website, and in developing our website. Responding to, handling, and mitigating suspected violations of law in connection with our business Legitimate interests in defending against and enforcing against violations and breaches that are harmful to our business. Complying with a binding request from a competent authority Legitimate interests in complying with mandatory legal requirements imposed on us. Enabling a structural change in the operation of the Website and our business Legitimate interests in our business continuity. Data Subject Rights If you are in the EU or the UK, you have the following rights under the GDPR: Right to Access and receive a copy of your personal information that we process. Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed. Right to Data Portability , that is, to receive the personal information that you provided to us, in a structured, commonly used, and machine-readable format. Right to Object to our processing of your personal information based on our legitimate interest. Right to Restrict us from processing your personal information (except for storing it) in certain cases. Right to be Forgotten , under certain circumstances, when you contact us, we reserve the right to request reasonable evidence to verify your identity before providing you with information. If we are unable to provide you with the requested information, we will explain the reason Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you may lodge a complaint with the supervisory authority in the Member State of your residence, place of work, or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here . If you are in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO) pursuant to the instructions provided here . Job Applicants When job applicants submit their application for an open position at the Company, we process their information to review their candidacies and make a recruitment decision. The information we process includes name, phone number, email and residential address, work history, education history, references from past employers, contact information of past employers, birthdate, abilities, skills and personal characteristics, additional information obtained from CV and interviews. Under the California Privacy Rights Act, this information is Professional or employment-related information, education information and characteristics of protected classifications. Our legal basis for this processing is our legitimate interests in properly reviewing applicant candidacy and making recruitment decisions. Additional information for individuals in the United States If you are an individual residing in the United States, we provide you with the following information pursuant to state privacy laws. We do not sell your personal information and have not done so in the past 12 months. We also do not use or disclose sensitive personal information. Below are the categories of personal information we have collected over the past 12 months, and the business purposes for its collection. Categories of personal information (under the CPRA) Specific types of personal information collected Specific business or commercial purpose for collecting personal information from consumers Identifiers Name, email address. Business development Administering the business and professional services relationship with customers and partners and facilitating the provision of support to customers and partners Facilitating the provision of the Portal and support for the Portal Administering the business relationship with vendors and service providers and facilitating the Company's use of vendors and service provider’s products and services Administering the relationship and service agreement we have with the Portal User’s business. Responding to, handling, and mitigating suspected violations of law in connection with our business Other information that identifies, relates to, describes, or is capable of being associated with, the individual Company affiliation, position, phone number, past communications with you and content of your inquiry. Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies Products and services used or expressed interest in. Internet or other electronic network activity information The webpages of the Website that you accessed or viewed, your interactions with the content on the Website, IP addresses, browser information, device identifiers, and data collected through cookies and similar technologies. Disclosure of your information to third parties The chart below explains the personal information we disclosed for a business purpose to third parties in the preceding 12 months. Categories of personal information (under the CPRA) Categories of third parties to whom we disclose your information and the specific business or commercial purpose for the disclosure Identifiers With outside legal counsel and authorities, for the purpose of responding to, handling, and mitigating suspected violations of law in connection with our business. With third parties to whom a law or binding order requires us to disclose your information. Our purpose in doing so is complying with our obligations under the law or the binding order. With the target entity of our merger, acquisition, or reorganization, and legal counsel and advisors, for the purpose of facilitating the structural change in the operation of our business within a different framework, or through another legal structure or entity (such as due to a merger or acquisition). Other information that identifies, relates to, describes, or is capable of being associated with, the individual Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies Internet or other electronic network activity information Professional or employment-related information; Education information; Characteristics of protected classifications Your Rights Knowing the Personal Information We Collect About You You have the right to know in greater detail about our processing of your personal information. Right to Deletion Subject to certain exceptions, upon receipt of a verifiable request from you, we will delete your personal information from our records and direct any service providers to delete your personal information from their records. Right to Correct Inaccurate Personal Information If we receive a verifiable request from you to correct your information and we determine the accuracy of the corrected information you provide, we will correct inaccurate personal information that we maintain about you. Protection against discrimination You have the right not to be discriminated against by us because you exercised any of your rights under applicable laws. Exercising your rights If you would like to exercise any of your rights as described in this Notice, please contact us by email at [email protected] . We will ask for additional information to confirm your identity and for security purposes before disclosing the personal data requested to you. You may also designate an authorized agent to make a request on your behalf. Our response to your requests We will respond to your requests within 45 days (or within 90 days, where the law permits and we determine it necessary considering the complexity and number of the requests you have filed). If we take longer than 45 days, we will inform you of the extension within the initial 45-day response period, together with the reason for the extension. You may appeal our decision to deny your request by sending us an email at [email protected] . Do Not Track Notice We do not currently respond to or take any action with respect to web browser “do not track” signals. We do allow third parties who provide us with analytics tools to collect personal data about a user’s online activities when a user uses the Website. Disclosures to third parties California Civil Code Section 1798.83 (and other similar state statutes) permits our customers who are California residents (or residents of states with similar legislation) to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected] . Please note that we are only required to respond to one request per customer each year. Last updated: April 2026