web-dev-website/security.html at main · ewprpwe2/web-dev-website · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Security — GDR Software Development</title>
    <meta name="description" content="GDR Software Development security practices. How we protect our systems and your data.">
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="styles.css">
    <link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32' fill='none'%3E%3Cpath d='M16 3L28 10L16 17L4 10Z' fill='%232997ff' fill-opacity='0.15' stroke='%232997ff' stroke-width='1.5' stroke-linejoin='round'/%3E%3Cpath d='M4 10L16 17L16 31L4 24Z' fill='%232997ff' fill-opacity='0.07' stroke='%232997ff' stroke-width='1.5' stroke-linejoin='round'/%3E%3Cpath d='M28 10L28 24L16 31L16 17Z' fill='%232997ff' fill-opacity='0.1' stroke='%232997ff' stroke-width='1.5' stroke-linejoin='round'/%3E%3C/svg%3E">
</head>
<body>
    <div class="top-accent"></div>

    <nav class="navbar is-scrolled" id="navbar">
        <div class="nav-container">
            <a href="index.html" class="nav-logo">
                <div class="logo-mark">
                    <svg class="logo-icon" width="28" height="28" viewBox="0 0 32 32" fill="none">
                        <path d="M16 3L28 10L16 17L4 10Z" fill="currentColor" fill-opacity="0.1" stroke="currentColor" stroke-width="1.2" stroke-linejoin="round"/>
                        <path d="M4 10L16 17L16 31L4 24Z" fill="currentColor" fill-opacity="0.05" stroke="currentColor" stroke-width="1.2" stroke-linejoin="round"/>
                        <path d="M28 10L28 24L16 31L16 17Z" fill="currentColor" fill-opacity="0.07" stroke="currentColor" stroke-width="1.2" stroke-linejoin="round"/>
                        <text x="16" y="10" font-family="Inter,sans-serif" font-size="5.5" font-weight="700" fill="currentColor" text-anchor="middle" dominant-baseline="central">R</text>
                        <text x="10" y="20.5" font-family="Inter,sans-serif" font-size="5.5" font-weight="700" fill="currentColor" text-anchor="middle" dominant-baseline="central">G</text>
                        <text x="22" y="20.5" font-family="Inter,sans-serif" font-size="5.5" font-weight="700" fill="currentColor" text-anchor="middle" dominant-baseline="central">D</text>
                    </svg>
                    <span class="logo-text">GDR</span>
                </div>
            </a>
            <div class="nav-links" id="navLinks">
                <a href="index.html#services" class="nav-link">Services</a>
                <a href="index.html#process" class="nav-link">Process</a>
                <a href="index.html#industries" class="nav-link">Industries</a>
                <a href="index.html#about" class="nav-link">About</a>
                <a href="index.html#contact" class="nav-link nav-link-cta">Start a Project</a>
            </div>
            <button class="nav-toggle" id="navToggle" aria-label="Toggle navigation">
                <span></span>
                <span></span>
                <span></span>
            </button>
        </div>
    </nav>

    <section class="legal-page">
        <div class="container">
            <div class="legal-header">
                <span class="section-tag">Security</span>
                <h1 class="section-title">Our Security Practices</h1>
                <p class="legal-updated">Last updated: 17 February 2026</p>
            </div>
            <div class="legal-content">
                <h2>Our Commitment</h2>
                <p>Security is at the core of everything we do at GDR Software Development. We take a proactive approach to protecting our systems, our clients' data, and the software we build.</p>

                <h2>Infrastructure Security</h2>
                <ul>
                    <li>All data is encrypted in transit (TLS 1.3) and at rest (AES-256)</li>
                    <li>Infrastructure hosted on reputable cloud providers with enterprise-grade physical security</li>
                    <li>Regular security assessments and vulnerability scanning</li>
                    <li>Network segmentation and firewall policies following the principle of least privilege</li>
                </ul>

                <h2>Application Security</h2>
                <ul>
                    <li>Secure development lifecycle (SDLC) integrated into every project</li>
                    <li>Static and dynamic application security testing (SAST/DAST) on every build</li>
                    <li>Dependency vulnerability scanning and automated updates</li>
                    <li>Code review requirements for all changes before deployment</li>
                </ul>

                <h2>Data Protection</h2>
                <ul>
                    <li>Access to client data is restricted on a need-to-know basis</li>
                    <li>Multi-factor authentication (MFA) enforced across all systems</li>
                    <li>Regular access reviews and immediate revocation upon role change</li>
                    <li>Comprehensive audit logging on all data access</li>
                </ul>

                <h2>Operational Security</h2>
                <ul>
                    <li>Incident response procedures documented and regularly tested</li>
                    <li>Security awareness training for all team members</li>
                    <li>Background checks for all employees</li>
                    <li>Secure device management policies for all endpoints</li>
                </ul>

                <h2>Responsible Disclosure</h2>
                <p>If you believe you have found a security vulnerability in our website or any of our services, we encourage you to report it responsibly. Please contact us at:</p>
                <p><strong>Email:</strong> contact@gdragency.com</p>
                <p>We take all reports seriously and will respond promptly. We ask that you do not publicly disclose the vulnerability until we have had the opportunity to investigate and address it.</p>
            </div>
        </div>
    </section>

    <footer class="footer">
        <div class="container">
            <div class="footer-bottom">
                <p>&copy; 2026 GDR Software Development. All rights reserved.</p>
                <div class="legal-nav">
                    <a href="privacy.html">Privacy</a>
                    <a href="terms.html">Terms</a>
                    <a href="cookies.html">Cookies</a>
                    <a href="security.html">Security</a>
                </div>
            </div>
        </div>
    </footer>

    <script src="script.js"></script>
</body>
</html>