Security Posture & Controls
Esaholic operates under audited SOC 2 Type II security controls. Our infrastructure enforces AES-256 encryption at rest, TLS 1.3 encryption in transit, isolated Kubernetes namespaces for client workloads, and continuous OWASP for LLMs vulnerability scanning.
1. Penetration Testing & Vulnerability Management
Independent CREST-certified penetration testers audit our agent microservices, MCP server connections, and API endpoints bi-annually. All static code repositories undergo automated Snyk and Semgrep vulnerability scans before pull request merging.
2. Prompt Injection & Jailbreak Defense
We implement multi-stage adversarial input validation using custom guardrail models and regex heuristic scanners. Agent tool invocations are strictly sanitized through Zod/Pydantic schemas to prevent indirect prompt injection.
3. Incident Response SLA
Our security operation team maintains a 15-minute SLA for critical severity incident notifications, with automated containment protocols built into our cloud orchestration controllers.