Security is the product.
Security is also the practice.

CYBEREYE is built by vCISOs. We hold ourselves to the same standard we audit our customers against.

Architecture

Read-only by default. Zero-retention by design.

Every integration is OAuth, scoped to read-only. We never ingest source data we don’t need. All LLM calls run under a zero-retention contract — your prompts and responses are never used to train models.

Data residency

EU-hosted today. Regional preference, on request.

Your data lives in the EU (Ireland) by default. A different region or a dedicated tenant can be requested — see Settings → Storage — though today that's a request we act on, not an automatic self-service switch. Nothing moves regions without us telling you first.

Encryption

In transit. At rest. Always.

TLS 1.3 in transit. AES-256-GCM at rest. Per-tenant data encryption keys, rotated automatically every 90 days. Customer-managed keys (CMK) available on enterprise.

Endpoint telemetry

Your EDR data stays in the EU.

Endpoint telemetry from the CYBEREYE Agent is received and processed on our EU-hosted EDR backend (a Wazuh manager + indexer running on DigitalOcean, Frankfurt). Each customer’s telemetry is kept under strict per-customer isolation, encrypted in transit (TLS) and at rest (AES-256), and never commingled across tenants. The full list of sub-processors lives in our privacy policy.

Access controls

Zero trust. MFA. IP allowlists.

Every login requires MFA. Granular role-based access control with least-privilege defaults. Optional IP allowlists per workspace. SSO via Microsoft Entra, Google Workspace, and WorkOS coming Q3.

Compliance

GDPR today. SOC 2 + ISO 27001 in flight.

GDPR compliant from day one. SOC 2 Type 1 audit scheduled Q4 2026. ISO 27001 certification in progress with target completion Q1 2027. DPA available on request.

Sub-processors

The full list. Always current.

ProviderUseRegion
VercelApplication hostingEU edge
SupabaseDatabase + authenticationIreland (EU)
AnthropicLLM inference (Claude)US — zero-retention contract
DigitalOceanCYBEREYE Agent / EDR backend (Wazuh manager + indexer)Frankfurt (EU)
GitHubSource control + CIUS

Download as JSON or PDF.

Bug bounty program

Public bounty launching alongside SOC 2. Until then, responsible disclosure via security@cybereye.co.il earns recognition, swag, and our gratitude.

security@cybereye.co.il