Shared Responsibility Model
Security is a shared commitment. Similar to the cloud security model, BlackShield secures the underlying platform and scanner runtime, while customers govern their identities, keys, and remediation.
Security IN the Platform
You configure, control, and govern your workspace data, user credentials, and operational policies.
Identity & Access Governance
Enforcing SSO/SAML 2.0, mandatory MFA, least-privilege role assignment (Admin, Member, Viewer), and employee offboarding.
API Key Lifecycle & Secret Hygiene
Storing API keys in CI secret stores (never in code), establishing bounded expiration windows, and immediate rotation on compromise.
Target Asset Authorization
Ensuring scanners, appliances, and agents are targeted exclusively against owned and legally authorized infrastructure.
Remediation & Patch Ownership
Prioritizing critical findings, deploying code and image patches, and formally approving and documenting policy exceptions.
Shared & Collaborative Controls
Outcomes requiring continuous operational partnership between BlackShield and your team.
Incident Response Coordination
Coordinated communications during security events, forensic evidence exchange, and coordinated vulnerability disclosure.
Compliance Audit Readiness
BlackShield supplies SOC 2 Type II / ISO 27001 platform evidence; customer demonstrates internal workflow governance.
Security OF the Platform
BlackShield engineers and maintains the secure host environment, runtime container enclaves, and cryptographic barriers.
Cryptographic Tenant Isolation
Dedicated physical storage partitions and tenant boundaries. Zero cross-tenant data leakage or shared database contention.
Edge & API Surface Protection
AWS WAF managed rule groups, automated DDoS mitigation, TLS 1.3 in transit, and token-bucket rate limiting across endpoints.
Scanner Runtime & Rule Efficacy
Immutable signed scanner container images, automated CVE database synchronization, and verified MITRE ATT&CK mappings.
Tamper-Evident Audit & Availability
Immutable append-only audit trail exports, 99.95% multi-AZ serverless uptime SLA, and continuous disaster recovery.
Need formal vendor due diligence materials?
Download our pre-completed CAIQ / SIG security questionnaires or request our SOC 2 Type II audit report package.