HTTPS is mandatory on all web interfaces, including the admin console, the API endpoints, and the recipient-facing reward redemption pages.
Does Xoxoday Plum conduct regular penetration testing?
Yes. Xoxoday Plum undergoes annual Vulnerability Assessment and Penetration Testing (VAPT) carried out by an independent third-party security vendor…
Does Xoxoday Plum have a vulnerability management program?
Xoxoday Plum maintains documented vulnerability management procedures covering scanning, penetration testing, audits, and secure SDLC practices…