Skip to main content
Xoxoday conducts periodic vulnerability assessments and penetration testing (VAPT) across all platforms. VAPT is performed annually by CERT-In empaneled vendors, ensuring independent and credible assessment.
Xoxoday conducts periodic vulnerability assessments and penetration testing (VAPT) across all platforms. VAPT is performed annually by CERT-In empaneled vendors, ensuring independent and credible assessment. The scope covers web applications, APIs, infrastructure, and network components. Identified vulnerabilities are classified by severity, remediated within defined SLAs, and verified through retesting. Additionally, continuous automated vulnerability scanning and code/dependency analysis are performed as part of the CI/CD pipeline to identify and address security issues during the development lifecycle. VAPT summary reports can be shared upon execution of an NDA. Learn more: Xoxoday Plum Help Centre

Does Xoxoday Plum conduct regular penetration testing?

Yes. Xoxoday Plum undergoes annual Vulnerability Assessment and Penetration Testing (VAPT) carried out by an independent third-party security vendor…

Does Xoxoday Plum have a vulnerability management program?

Xoxoday Plum maintains documented vulnerability management procedures covering scanning, penetration testing, audits, and secure SDLC practices…