Tenant-aware access
Customer-specific information is protected through authenticated access, authorization boundaries and row-level security.
TRUST & SECURITY
Protective intelligence requires trust.
ThreatPosture is designed to keep customer access controlled, evidence visible and consequential recommendations explainable while authorized operators retain decision authority.
Controlled policy context
Authorized operational and policy context remains distinct from public-source intelligence and AI-assisted recommendations.
Evidence stays visible
Material recommendations retain source context and reasoning so operators can evaluate the judgment rather than trust an unexplained score.
Humans retain authority
ThreatPosture supports decisions; it does not replace incident command, emergency procedures, organizational policy or professional judgment.
DECISION CONTINUITY
Preserve useful operational history.
Preparedness actions can retain recommendation context, supporting evidence, operator disposition and completion state for continuity, handoffs and after-action review. These records are decision-support history, not a representation of legal compliance or an insurance guarantee.
SECURITY CONTROLS
Build the controls before claiming the badge.
Current product controls include authenticated application access, tenant-aware authorization, row-level security, server-side handling of privileged credentials, restricted sensitive-data mutation, dependency scanning, automated build and regression gates, and production browser-security headers.
DATA & PROVIDERS
Collect for the mission. Be clear about the systems supporting it.
ThreatPosture centers on publicly available and authorized operational context rather than internal network monitoring or employee surveillance. Core service providers currently include Vercel for application hosting and delivery, Supabase for database and authentication infrastructure, Resend for transactional email, and OpenAI services for AI-assisted analysis. Provider capabilities or certifications are not represented as ThreatPosture certifications.
SOC 2 READINESS
Controls first. Certification claims only after independent validation.
ThreatPosture is building toward a formal security-control program appropriate for SOC 2 readiness, including access review, change control, auditability, incident response, vendor oversight and documented security policies. ThreatPosture is not currently SOC 2 certified and has not completed an independent SOC 2 examination.
SECURITY REVIEW
Need to evaluate ThreatPosture before purchase?
We can discuss architecture, data handling, access controls, subprocessors, incident-response practices and the security roadmap as part of procurement.