Security & Compliance
We follow strict procedures and international standards to ensure the security, continuity, and integrity of our systems and software. Our processes are aligned with ISO 27001 and the Secure Development Lifecycle (SDLC) model.
SMSEagle is ISO 27001 certified
SMSEagle holds ISO 27001 certification, an internationally recognized standard for information security management systems (ISMS). This certification demonstrates our commitment to systematically managing and protecting the sensitive information involved in the development, operation, and delivery of our hardware SMS gateways and associated software. It assures our customers and partners that we adhere to stringent security controls and best practices, continuously improving our information security posture across both physical and digital aspects of our product.
Secure by design
We build SMSEagle with security in mind from design to deployment. We use secure hardware design, safe coding practices for firmware, and thorough testing of the whole system. By making security measures a part of every step, we keep SMSEagle strong, reliable, and trustworthy.
Security Testing
Static Application Security Testing (SAST)
We regularly scan our code with SAST tools to find security vulnerabilities early, before we release anything
Software Composition Analysis (SCA)
We analyze third-party and open-source components for known vulnerabilities to ensure our software supply chain remains secure and up to date.
Automated and manual tests
Security testing combines automated tools with expert-driven manual reviews to uncover a broad range of potential threats and weaknesses.
External penetration testing
Independent security professionals conduct regular penetration tests to evaluate the effectiveness of our defenses from an attacker’s perspective.
Threat modeling
To prevent attacks, we analyze potential weaknesses and build our systems with a secure architecture, guided by threat modeling.
Code reviews
Before any code is integrated, peers review it to confirm it follows security best practices and to spot potential vulnerabilities.
Vulnerability Management & Incident Response
Our top priority is safeguarding the security of our customers and the public. Effective communication is vital to our cybersecurity efforts, and we ask research groups and individuals to responsibly disclose to our team any potential security issue in our products. You will receive an acknowledgment of your report within 3 business days. We will provide status updates until the issue is resolved.
SMSEagle Security Advisories
SMSEagle Software updates
We are committed to ensuring the highest level of security for our devices by providing regular software updates. These include software fixes and enhancements that improve the functionality of our products and strengthen their security against emerging threats. By keeping your devices up-to-date with our latest software, you can enjoy a smoother & safer user experience.
