Skip to main content
Yes. Xoxoday follows secure configuration and system hardening practices aligned to industry security benchmarks. Infrastructure components are deployed from hardened base images with no embedded credentials. Configuration hardening is reviewed annually.
Yes. Xoxoday follows secure configuration and system hardening practices aligned to industry security benchmarks. Infrastructure components are deployed from hardened base images with no embedded credentials. Configuration hardening is reviewed annually. The SDLC includes mandatory code review by technical leads/architects, automated and manual source code analysis, and a QA security gate before production deployment. Learn more: Xoxoday Help Centre

Does Xoxoday have a dedicated information security team?

Yes, Xoxoday maintains a dedicated Information Security team led by the CTO, covering GRC, AppSec, cloud security, and data privacy compliance.

Does Xoxoday perform static code analysis before release?

Xoxoday runs static code analysis and SAST on every code change as part of its secure development lifecycle before any production deployment.