Skip to content

Pulumi Platform Security Whitepaper #16811

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
borisschlosser wants to merge 7 commits into
base: master
Choose a base branch
from
+525 −6
Open

Pulumi Platform Security Whitepaper #16811

Show file tree
Hide file tree
Changes from 6 commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
8fb53ff
Pulumi Platform Security Whitepaper
borisschlosser Dec 12, 2025
d880fdd
Improvements
borisschlosser Dec 12, 2025
a4caf00
Fix Claude suggestions
borisschlosser Dec 12, 2025
fded8ba
mermaid
borisschlosser Dec 12, 2025
f80346f
Styling
borisschlosser Dec 15, 2025
1045f9b
Claude's comments
borisschlosser Dec 15, 2025
12941dd
Reviewer comments
borisschlosser Dec 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 3 additions & 6 deletions content/security/_index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,18 +1,15 @@
---
title: Pulumi Security
meta_desc: A summary of security topics and how they relate to the Pulumi platform.
layout: security
---

Pulumi takes security and privacy matters very seriously. We appreciate that our customers and users place a high degree of confidence and trust in our products and services and we strive to meet those expectations.

## Pulumi Service Security
## Pulumi Platform Security

<!-- markdownlint-disable url -->
Pulumi Service, our managed service for using Pulumi open source, is multi-tenanted and runs within an AWS Virtual Private Cloud (VPC), whose only Internet-addressable endpoints are https://api.pulumi.com or https://app.pulumi.com. All communications between Pulumi clients and the server are encrypted using TLS. Pulumi is SOC 2 Type II certified.
<!-- markdownlint-enable url -->
The Pulumi platform employs industry best practices for security and is SOC 2 Type II certified.

For more details on Pulumi’s product architecture and security practices, please read our [security whitepaper](/security/pulumi-cloud-security-whitepaper.pdf) (last updated October 24, 2022).
For more details, see our [security whitepaper](/security/pulumi-cloud-security-whitepaper).

## Vulnerability Reporting

Expand Down
Loading
Loading