Security vulnerabilities are detected early using static code analysis and peer reviews during development. Each change is reviewed by a team member before being merged into the codebase.
Regular penetration testing is conducted to ensure the platform remains secure against potential threats. Each finding is addressed and remediated within the timeframes depending on the severity.
Security checks are performed at each stage of the CI/CD pipeline to ensure that only secure code is deployed.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Zenoo Hub Platform","colors":{"primary":"#8A53FF","light":"#A070FF","dark":"#8A53FF"},"logo":{"light":"https://mintcdn.com/zenoo-eaa1410a/YIo6tI9OgSdq1OH9/images/logo-light.svg?fit=max\u0026auto=format\u0026n=YIo6tI9OgSdq1OH9\u0026q=85\u0026s=78487e160cff85131b720e4061860a01","dark":"https://mintcdn.com/zenoo-eaa1410a/YIo6tI9OgSdq1OH9/images/logo-dark.svg?fit=max\u0026auto=format\u0026n=YIo6tI9OgSdq1OH9\u0026q=85\u0026s=d2b14808a47598cd49537bb9895064d5"},"favicon":"https://mintcdn.com/zenoo-eaa1410a/9A8iKlWdm-D3ntYM/images/zenoo-favicon.svg?fit=max\u0026auto=format\u0026n=9A8iKlWdm-D3ntYM\u0026q=85\u0026s=e9f5413d5bd4755b77427f00671d17cf","appearance":{"default":"dark"},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"zenoo-eaa1410a","hasAudioNarration":false,"actualSubdomain":"zenoo-eaa1410a","customDomains":["platform.docs.zenoo.com"],"gitSource":{"type":"github","owner":"ceyhunhan","repo":"platform-docs-mintlify","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ae04c033a4c72682e6597fe","collectionId":"13cbf6ae-ea25-4dc1-bb4e-7de087d0f725","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ae04c033a4c72682e6597fe"},"entitlements":{},"buildId":"6ae0f4c4d21e87b41a4b0802","clientVersion":"0.0.3990","searchFilterCounts":[{"language":"default","tag":"Technical Specification","count":47},{"language":"default","tag":"Hub Backend","count":31},{"language":"default","tag":"Hub Client","count":16},{"language":"default","tag":"Cloud Providers","count":10},{"language":"default","tag":"Target Configuration","count":10},{"language":"default","tag":"Security \u0026 Compliance","count":9},{"language":"default","tag":"Security and Compliance","count":9},{"language":"default","tag":"Hub Platform Security","count":6},{"language":"default","tag":"Overview","count":5},{"language":"default","tag":"Connectors","count":4}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[],"isAtlas":false,"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"security-and-compliance/hub-platform-security/sdlc","slug":"/security-and-compliance/hub-platform-security/sdlc","pageMetadata":{"title":"Security in the Software Development Lifecycle (SDLC)","description":"Security practices integrated into Zenoo's software development lifecycle","href":"/security-and-compliance/hub-platform-security/sdlc"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Security practices integrated into Zenoo’s software development lifecycle\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={p:`p`,strong:`strong`,..._provideComponents(),...props.components},{Heading}=_components;if(!Heading)_missingMdxReference(`Heading`,true);return _jsxs(_Fragment,{children:[_jsx(Heading,{level:`2`,id:`security-in-the-software-development-lifecycle-sdlc`,children:_jsx(_components.strong,{children:`Security in the Software Development Lifecycle (SDLC)`})}),`\n`,_jsx(Heading,{level:`3`,id:`code-reviews-and-static-code-analysis`,children:`Code Reviews and Static Code Analysis`}),`\n`,_jsx(_components.p,{children:`Security vulnerabilities are detected early using static code analysis and peer reviews during development. Each change is reviewed by a team member before being merged into the codebase.`}),`\n`,_jsx(Heading,{level:`3`,id:`penetration-testing`,children:`Penetration Testing`}),`\n`,_jsx(_components.p,{children:`Regular penetration testing is conducted to ensure the platform remains secure against potential threats. Each finding is addressed and remediated within the timeframes depending on the severity.`}),`\n`,_jsx(Heading,{level:`3`,id:`ci/cd-pipelines`,children:`CI/CD Pipelines`}),`\n`,_jsx(_components.p,{children:`Security checks are performed at each stage of the CI/CD pipeline to ensure that only secure code is deployed.`})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Security in the Software Development Lifecycle (SDLC)","description":"Security practices integrated into Zenoo's software development lifecycle","href":"/security-and-compliance/hub-platform-security/sdlc"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Security in the Software Development Lifecycle (SDLC)","slug":"security-in-the-software-development-lifecycle-sdlc","depth":2,"children":[{"title":"Code Reviews and Static Code Analysis","slug":"code-reviews-and-static-code-analysis","depth":3,"children":[]},{"title":"Penetration Testing","slug":"penetration-testing","depth":3,"children":[]},{"title":"CI/CD Pipelines","slug":"ci/cd-pipelines","depth":3,"children":[]}]}],"codeExamples":{}},"jsLinks":[],"subdomain":"zenoo-eaa1410a","siteName":"Zenoo Hub Platform","title":"Security in the Software Development Lifecycle (SDLC) - Zenoo Hub Platform","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-03-28T06:14:01.178Z","originalFileLocation":"security-and-compliance/hub-platform-security/sdlc.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"dark\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Security practices integrated into Zenoo\u0026#x27;s software development lifecycle\">\u003cmeta data-mint-head name=\"application-name\" content=\"Zenoo Hub Platform\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Security in the Software Development Lifecycle (SDLC) - Zenoo Hub Platform\">\u003cmeta data-mint-head property=\"og:description\" content=\"Security practices integrated into Zenoo\u0026#x27;s software development lifecycle\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Zenoo Hub Platform\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://zenoo-eaa1410a.mintlify.app/_mintlify/api/og/v2?division=Hub+Platform+Security\u0026amp;title=Security+in+the+Software+Development+Lifecycle+%28SDLC%29\u0026amp;description=Security+practices+integrated+into+Zenoo%27s+software+development+lifecycle\u0026amp;theme=65d9d52e0fa33a6b5279bdfa\u0026amp;signature=a92fc8ba3336262d8252f6cab66e5d5f65980bc211da08af19c041bfae76df1d\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Security in the Software Development Lifecycle (SDLC) - Zenoo Hub Platform\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Security practices integrated into Zenoo\u0026#x27;s software development lifecycle\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://zenoo-eaa1410a.mintlify.app/_mintlify/api/og/v2?division=Hub+Platform+Security\u0026amp;title=Security+in+the+Software+Development+Lifecycle+%28SDLC%29\u0026amp;description=Security+practices+integrated+into+Zenoo%27s+software+development+lifecycle\u0026amp;theme=65d9d52e0fa33a6b5279bdfa\u0026amp;signature=a92fc8ba3336262d8252f6cab66e5d5f65980bc211da08af19c041bfae76df1d\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/zenoo-eaa1410a/-EuU_Hd1dOanaiuM/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Zenoo Hub Platform\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#8A53FF\">\u003clink data-mint-head rel=\"canonical\" href=\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/security-and-compliance/hub-platform-security/sdlc.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://platform.docs.zenoo.com/#organization\",\"name\":\"Zenoo Hub Platform\",\"url\":\"https://platform.docs.zenoo.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/zenoo-eaa1410a/YIo6tI9OgSdq1OH9/images/logo-light.svg?fit=max\u0026auto=format\u0026n=YIo6tI9OgSdq1OH9\u0026q=85\u0026s=78487e160cff85131b720e4061860a01\"}},{\"@type\":\"WebSite\",\"@id\":\"https://platform.docs.zenoo.com#website\",\"name\":\"Zenoo Hub Platform\",\"url\":\"https://platform.docs.zenoo.com\",\"publisher\":{\"@id\":\"https://platform.docs.zenoo.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc#webpage\",\"url\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc\",\"name\":\"Security in the Software Development Lifecycle (SDLC)\",\"description\":\"Security practices integrated into Zenoo's software development lifecycle\",\"dateModified\":\"2026-03-28T06:14:01.178Z\",\"isPartOf\":{\"@id\":\"https://platform.docs.zenoo.com#website\"},\"breadcrumb\":{\"@id\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Security and Compliance\",\"item\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hub Platform Security\",\"item\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/infrastructure-security\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Security in the Software Development Lifecycle (SDLC)\",\"item\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc#article\",\"headline\":\"Security in the Software Development Lifecycle (SDLC)\",\"name\":\"Security in the Software Development Lifecycle (SDLC)\",\"description\":\"Security practices integrated into Zenoo's software development lifecycle\",\"url\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc\",\"mainEntityOfPage\":{\"@id\":\"https://platform.docs.zenoo.com/security-and-compliance/hub-platform-security/sdlc#webpage\"},\"dateModified\":\"2026-03-28T06:14:01.178Z\",\"publisher\":{\"@id\":\"https://platform.docs.zenoo.com/#organization\"},\"isPartOf\":{\"@id\":\"https://platform.docs.zenoo.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Zenoo Hub Platform\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Zenoo Hub Platform","nav":{"global":null,"tabs":[{"tab":"Overview","pages":[{"title":"Overview","href":"/introduction"}]},{"tab":"Technical Specification","pages":[{"title":"Technical Specification","href":"/technical-specification/hub-backend/architecture"}]},{"tab":"Environment \u0026 Deployment","pages":[{"title":"Environment \u0026 Deployment","href":"/environment-and-deployment/environments"}]},{"tab":"Security \u0026 Compliance","groups":[{"group":"Security and Compliance","pages":[{"title":"Platform Security","href":"/security-and-compliance/hub-platform-security"},{"group":"Hub Platform Security","pages":[{"title":"Infrastructure Security","href":"/security-and-compliance/hub-platform-security/infrastructure-security"},{"title":"Data Security","href":"/security-and-compliance/hub-platform-security/data-security"},{"title":"Application Security","description":"Application security measures for the Zenoo platform","href":"/security-and-compliance/hub-platform-security/application-security"},{"title":"Security in the Software Development Lifecycle (SDLC)","href":"/security-and-compliance/hub-platform-security/sdlc"},{"title":"Monitoring and Logging","description":"Monitoring and logging practices for the Zenoo platform","href":"/security-and-compliance/hub-platform-security/monitoring"},{"title":"Data Flow","href":"/security-and-compliance/hub-platform-security/data-flow"}]},{"title":"Zenoo Policies","href":"/security-and-compliance/zenoo-policies"},{"title":"Open Source in the Zenoo Platform","href":"/security-and-compliance/open-source-usage"}]}]}]},"title":"Security in the Software Development Lifecycle (SDLC) - Zenoo Hub Platform","buildId":"dpl_2oYXwqkEXirXBPk8wV1FtM5USFWi","deploymentId":"dpl_2oYXwqkEXirXBPk8wV1FtM5USFWi","dynamics":[],"chunks":[]}
