A clear security scope
This website provides information, inquiries and account entry points. Production catalog access, authorization and destination credentials belong in the connected application. A website preview is not evidence of production security controls or certifications.
Your account
Use unique credentials and available multi-factor authentication. Limit account access to authorized team members. Report suspected compromise promptly and revoke affected destination access where possible.
Destination credentials
Do not send passwords or API keys through contact forms or email. Destination authorization must use an approved secure onboarding method with the permissions required for your configured workflow.
Enterprise review
Before activation, request the relevant security information, hosting details, subprocessors and contractual processing terms needed for your review. No SOC 2, ISO 27001 or other certification is claimed by this page.
Responsible disclosure
Email support@web-ory.com with a concise description and safe reproduction steps. Do not access other users’ information, disrupt service or publicly expose secrets. We will acknowledge and assess credible reports.
