Security Statement

Last Updated: March 2025Applies to all UserSentry products

Security is foundational to everything we build. UserSentry products are designed with a security-first architecture: we minimize data exposure, use encrypted storage, leverage platform-native infrastructure, and follow industry-aligned security practices across all our apps.

Atlassian Forge Infrastructure

Our Atlassian apps (Seats Management, CrowdStrike for Jira) run entirely on Atlassian Forge — Atlassian's own serverless platform. There are no external servers operated by UserSentry involved in processing your data.

Encrypted Storage

All sensitive data — including CrowdStrike API credentials — is stored in Forge's encrypted key-value storage (KVS). Data is encrypted at rest and never exposed in plaintext.

OAuth2 Authentication

CrowdStrike API access uses OAuth2 client credentials. Tokens are short-lived and refreshed automatically. No long-lived secrets are stored in insecure locations.

Data Stays in Atlassian

No customer data leaves the Atlassian infrastructure, except for API calls made directly to CrowdStrike's own API endpoints. We never route, store, or proxy your detection data through our own infrastructure.

monday.com App Security

UserSentry and AuditSentry SIEM use only official monday.com APIs and are distributed through the monday.com App Marketplace. All data access is governed by monday.com's own OAuth scopes and permissions.

SOC2-Aligned Practices

Our development and operational practices are aligned with SOC2 principles: least-privilege access, audit logging, encrypted credentials, and regular security reviews.

Product-Specific Security Details

UserSentry for monday.com

  • Accesses monday.com user data only via official monday.com APIs with OAuth-scoped permissions.
  • Distributed exclusively through the monday.com App Marketplace.
  • Stores only essential metadata (account identifiers, automation settings) required for functionality.
  • All data is encrypted and subject to monday.com's platform security standards.

AuditSentry SIEM for monday.com

  • Uses monday.com's audit log API to read security events. No write access is required or requested beyond what the app function demands.
  • IP geolocation for login mapping is performed using publicly available data; no PII is sent to geolocation providers.
  • Distributed through the monday.com App Marketplace.

Seats Management for Jira

  • Built on Atlassian Forge — runs on Atlassian's serverless infrastructure with no external servers.
  • Accesses only user activity timestamps, account status, and group memberships via Atlassian APIs.
  • All app data is stored in Forge's encrypted key-value storage (KVS).
  • No customer data is transmitted outside of Atlassian's infrastructure.

CrowdStrike for Jira

  • Built on Atlassian Forge — runs entirely within Atlassian's infrastructure.
  • CrowdStrike API credentials (Client ID and Secret) are stored exclusively in Forge's encrypted KVS — never in plaintext, never in external systems.
  • OAuth2 is used for all CrowdStrike API authentication. Tokens are short-lived.
  • Detection data flows directly from CrowdStrike's API to Jira. UserSentry does not store, log, or proxy detection payloads.
  • Requires an active CrowdStrike Falcon subscription. UserSentry does not provide or resell CrowdStrike licenses.

Responsible Disclosure

If you discover a security vulnerability in any of our products, please report it responsibly to support@user-sentry.com. We are committed to investigating and addressing security reports promptly.

UserSentry
© 2025 UserSentry. All rights reserved.