Security
Information security at Coexi
Coexi builds and runs websites, CMS platforms and integrations for businesses that live on paid campaigns. Protecting these systems, and the data of the people who come through them, is part of the job, not a step at the end.
What we do
-
Coexistent review
All code, written by our team or by third parties, goes through a security review before reaching production, again after it is published and in a monthly review.
-
Internal red team
We deliberately attack the systems we build and run for clients, to find the flaw before anyone else or any automated scan on the internet does.
-
Secrets kept out of the code
Passwords, tokens and keys live in a state-of-the-art vault with advanced encryption. Access is audited and every project is scanned.
How to report a vulnerability
Found a flaw in a Coexi website or system, or in one we run for a client? Write to security@coexi.com.br with:
- the affected address or system;
- the steps to reproduce it;
- the impact you observed;
- screenshots or a proof of concept, if you have them;
- a contact for our reply.
We confirm receipt and keep you informed until the fix. Reports in Portuguese or English.
Shall we coevolve?
Tell us who you are, what you sell, to whom and what hurts most in your business today. Within one business day you get a strategic path, with a solution, a timeline and a fair price.