Security
Application Security
Who is responsible for the security of the software Eternity Solutions builds and maintains, what that responsibility covers, and how to reach them.
Security officer and point of contact
- Name
- Joshua Kovach
- Role
- Application Security Lead, Eternity Solutions LLC
- joshua@eternitysolutions.tech
- Phone
- (203) 577-9201
Joshua Kovach leads application security for Eternity Solutions LLC and is the company's security point of contact. He is responsible for the security posture of all software developed and maintained by the company, from initial design through ongoing operation.
Responsibilities
- Security review of designs, code, dependencies, and infrastructure before and after release.
- Vulnerability remediation: triage, fix, and verification of reported or discovered issues.
- Ongoing security maintenance: dependency and platform updates, configuration hardening, and monitoring for software the company operates.
- Security assessment of company-owned systems and, with explicit written authorization, client systems the company builds or maintains.
Scope of security testing
Security assessments and testing performed by Eternity Solutions are limited to systems the company owns and client systems for which the client has given explicit authorization. The company does not test, scan, or probe third-party systems without that authorization.
Reporting a security issue
If you believe you have found a vulnerability in software or infrastructure operated by Eternity Solutions, email joshua@eternitysolutions.tech with a description, the affected system, and steps to reproduce. You will get an acknowledgement within one business day. Please give us a reasonable window to remediate before public disclosure. This contact is also published at /.well-known/security.txt.