Security & Trust
1. Our Commitment to Security
At Viewspection, security is not an afterthought - it is a core part of our engineering culture. We are committed to transparency and to protecting the integrity of your data and our platform. This page outlines the specific measures we take to keep our services secure.
2. Infrastructure & Hosting
Our platform runs on industry-standard infrastructure designed for high availability and security.
-
Secure Hosting: We utilize AWS to host our application. Our infrastructure providers maintain ISO 27001, SOC 1, and SOC 2 compliance.
-
SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS) 1.2 or newer. We score an “A+” on standard SSL Labs tests.
-
DDoS Protection: We employ AWS firewalls to mitigate Distributed Denial of Service (DDoS) attacks and ensure site uptime.
3. Application Security
-
Web Application Firewall (WAF): We use AWS to actively block malicious traffic, SQL injection attempts, and brute-force attacks.
-
File Integrity Monitoring: We continuously scan core files to detect any unauthorized changes or malware injection.
4. Data Protection & Access Control
Even though we do not process payments, we treat user data with the highest confidentiality.
​
-
No Payment Data: We do not collect, store, or process credit card numbers or financial information.
-
Password Hashing: User passwords are never stored in plain text. They are salted and hashed using standard WordPress hashing.
-
Backups: We perform encrypted daily backups of our database and filesystem. These backups are stored in a separate geographic location to ensure data recovery in the event of a disaster.
-
Least Privilege Access: Employee access to administrative tools is restricted to essential personnel only and is protected by Two-Factor Authentication (2FA).
5. Responsible Disclosure Policy
We value the contributions of the security research community. If you believe you have found a security vulnerability in Viewspection, we encourage you to let us know.
​
Guidelines:
-
Please report the vulnerability to support@viewspection.com.
-
Allow us reasonable time to fix the issue before making it public.
-
Do not exploit the vulnerability to view data of other users or degrade our service.
-
Safe Harbor: We will not pursue legal action against researchers who report issues in good faith and in compliance with these guidelines.