Overview
This article describes HENNGE's approach to addressing vulnerabilities.
Details
HENNGE One continuously collects information regarding vulnerabilities based on publicly available information from JPCERT/CC and information provided by AWS and other sources. In accordance with the “Service Development and Operations Manual,” which complies with ISMS/ISO27018 certification requirements, we have established a framework for appropriately assessing the impact of and determining responses to newly discovered vulnerabilities in a timely manner.
If an investigation confirms an impact on customers in the HENNGE One service (including the technology stack and components in use), or if any action is required on the customer side, we will promptly provide notification through the HENNGE One Status Dashboard or other channels.
Reference: https://status.hdeone.com/
To prevent the disclosure of information to malicious third parties and to ensure that customers can use our services safely, our security policy generally does not disclose details of internal specifications, including information about individual technology stacks and whether specific components are in use.
We appreciate your understanding and cooperation.
Translation Disclaimer
This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.
In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.