SutramX Security Architecture
Last Updated: August 11, 2026
At SutramX, security is the foundation of our synthetic monitoring network. HTTP endpoints, internal microservices, and database probes across our customers' infrastructure rely on our platform every single day.
1. Data Protection & Encryption at Rest
All sensitive credentials, API keys, webhook signing secrets, and TOTP seeds are encrypted using AES-256-GCM authenticated encryption prior to persistence in our primary database.
- TLS 1.3 Transport Security: All client interactions and probe transmissions operate strictly over encrypted TLS 1.3 channels with HSTS forced.
- Zero-Trust Database Encryption: Secrets are decrypted exclusively inside ephemeral probe worker memory space during active synthetic checks.
2. Multi-Factor Authentication (TOTP 2FA)
SutramX enforces optional and enterprise-mandatory Time-based One-Time Password (TOTP) two-factor authentication for all workspace members using HMAC-SHA1 RFC 6238 standards.
3. Probe Network Security & SSRF Defense
Server-Side Request Forgery (SSRF) Mitigations
Our distributed synthetic probe network incorporates strict IP address validation filters, blocking attempts to probe internal loopback addresses (127.0.0.1, ::1), private cloud metadata endpoints (169.254.169.254), and RFC 1918 private subnets.
4. Compliance
SutramX is GDPR compliant, handling personal data in line with the EU General Data Protection Regulation's requirements for lawful processing, data subject rights, and breach notification.
5. Vulnerability Disclosure & Bug Bounty
If you discover a security vulnerability in SutramX systems, please notify our security team directly at security@sutramx.com. PGP public key available upon request.