Customer access
New portal tenants require multi-factor authentication by default. Access to customer records is checked against tenant and client permissions.
Security and trust
Our security commitments
How KernelHawk separates public inquiries from customer assessment work.
Access and evidence
Evidence and scores
The score is calculated from recorded checks and the evidence supporting them; an assessor cannot enter a replacement score by hand.
Public site
This marketing site does not store customer assessment evidence. Public forms accept business inquiries and do not accept files or binaries.
Assessment data and authorization
Testing requires a written scope and permission from the organization responsible for the systems. Customer evidence is handled under the engagement agreement, which states access, retention, and deletion terms. Ask for these terms before sharing sensitive material.
Backup, recovery, subprocessor, and incident-notification commitments are written into your engagement agreement. Ask for the current version before you share sensitive material.
Report a security issue
Email security@kernelhawk.com. Read security.txt for the reporting policy. Do not send secrets or access another customer's data. Reporting a concern does not authorize testing.
Operator
KernelHawk is operated by an individual proprietor in the United States. Privacy requests: privacy@kernelhawk.com or the contact form.