Sicherheitspartner

---

At WebWork, we take security seriously. That’s why we work with trusted leaders in the industry—DigiCert, Cloudflare, FortWatch.ai and Bulwarkers—to provide the best protection for your data and ensure a safe, reliable experience for all our users.

DigiCert: Trusted Certificates for Security and Trust

What DigiCert Does for Us:

• SSL/TLS Certificates: Every connection to WebWork is encrypted using DigiCert’s SSL/TLS certificates, ensuring secure communication between your device and our servers.
• Code-Signing Certificates: Our applications and updates are signed with DigiCert certificates to guarantee their integrity and prove they come from a trusted source.

Recognized Worldwide: DigiCert’s certificates are trusted by all major browsers and operating systems, giving you peace of mind every time you connect.

Cloudflare: A Shield for Speed and Security

Cloudflare protects our platform from online threats while also improving performance, making sure WebWork is always fast and secure.

How Cloudflare Helps:

• DDoS Protection: Shields WebWork from Distributed Denial-of-Service (DDoS) attacks, ensuring uninterrupted access even during malicious traffic surges.
• Web Application Firewall (WAF): Defends against a wide range of vulnerabilities, including SQL injection, cross-site scripting (XSS), and other OWASP Top 10 threats.
• Page Shield: Monitors and protects against potential threats from third-party scripts running on your website, such as Magecart attacks.
• API Shield: Secures APIs with strong authentication and schema validation, preventing exploitation of API endpoints.
• Protected DNS Resolution: Prevents DNS-based attacks, such as cache poisoning and DNS spoofing, by ensuring secure DNS query handling.
• DNSSEC (Domain Name System Security Extensions): Validates DNS responses with cryptographic signatures, preventing attackers from redirecting traffic to malicious sites.
• Content Delivery Network (CDN): Speeds up page loads by delivering content from servers closest to you.
• Bot Management: Blocks malicious bots while allowing genuine traffic through.
• Threat Intelligence: Leverages a global network to analyze and respond to emerging threats in real time, proactively keeping WebWork secure.

FortWatch.ai: Continuous Vulnerability Scanning

We use FortWatch.ai, an AI-first vulnerability management platform, to keep our websites, APIs and infrastructure under continuous review.

What FortWatch.ai Does for Us:

• Continuous Vulnerability Detection: Scans our websites, APIs and infrastructure to find weaknesses before they can be exploited.
• Rapid Threat Response: Surfaces new findings as they appear, so issues get fixed while they are still small.
• Compliance Evidence: Produces the scan record our HIPAA, GDPR and CCPA control reviews rely on.

FortWatch.ai is built by WebWork AI, Inc., the same company behind WebWork Time Tracker.

Bulwarkers: Monthly Penetration Testing

Bulwarkers is an independent security firm that tests WebWork every month — far more often than the annual test most standards ask for.

How Bulwarkers Keeps You Safe:

• Monthly Manual Testing: Real testers probe the platform each month, not only automated scans.
• Two Reports Every Cycle: An executive summary and a full security assessment, each tracked until every finding is closed.
• Independent Verification: Our engineers fix the findings and the tester confirms the fix.

Why It Matters

Our security partners — DigiCert, Cloudflare, FortWatch.ai and Bulwarkers — keep WebWork:

• Secure: Your data is encrypted and protected from online threats.
• Reliable: We stay online and responsive, even under heavy traffic or malicious attacks.
• Compliant: We maintain HIPAA, GDPR and CCPA controls through continuous internal review and monthly third-party penetration testing.
• Fast: With Cloudflare’s CDN, our platform loads quickly no matter where you are in the world.

By working with these trusted names in security, we provide you with a platform that you can rely on, so you can focus on your work without worrying about your data.