Encryption everywhere
AES-256-GCM at rest, TLS 1.3 in transit, per-tenant key isolation via AWS KMS. Credential templates stored on-device only.
Trust center
EntryBit guards your doors — we hold ourselves to the same standard. Here's exactly how.
Six pillars
Every layer independently audited and hardened. No single failure compromises the system.
AES-256-GCM at rest, TLS 1.3 in transit, per-tenant key isolation via AWS KMS. Credential templates stored on-device only.
SSO, SCIM, MFA enforcement, and least-privilege defaults. No permanent service accounts.
Hash-chained event log. Every admin action signed and exportable.
Private VPC, mTLS device fleet, WAF at the edge.
Every controller firmware update cryptographically signed.
Live SOC, pager rotation, incident response under 15 min.
Responsible disclosure
We welcome responsible disclosure. Email security@entrybit.net with reproduction steps. We respond within one business day and credit researchers in our hall of fame.
9F3A · 2E8B · C4D1 · 7F52 · 0A9COur security team is happy to walk you through our architecture, runbooks and audit evidence.