Security Response

Thank you for taking the time.

We are intensely focused on keeping our customers’ data safe and secure here at FoxyCart. Any input that helps us better serve and protect our customers is welcome. We are glad that you took the time to contact us.

Reporting a security concern.

Please use our public key and send a PGP/GPG encrypted message to security@foxycart.com so that we can give it proper treatment and handling. We will reply back to you as quickly as we can, usually within 24 hours. If you have a less urgent request, please contact our Help Desk.

We are transparent and open with our customers. After we have identified and corrected the issue, we will issue a public statement giving full credit to the discoverer.

Tracking security issues.

Have a security issue that you think affects FoxyCart stores? Please let us know. We track multiple security lists and watch for issues that affect our infrastructure. Once we are aware of an issue, here’s how we handle it:

We immediately patch and repair of any affected software or infrastructure.
We review our internal policies and procedures to understand how the issue arose.
We give full disclosure to our customers, crediting the person or team that discovered the issue and detailing our measures to resolve any impact and prevent any future recurrence.

Security is a major focus for us.

We work with many security consultants in order to assure our continued compliance with PCI DSS, and most importantly, the continued security and integrity of all of our systems. Among our many security tools and activities are:

Regular external and internal vulnerability scans and penetration testing.
Servers are provisioned with a top PCI-compliant hosting provider.
Continuous monitoring of all aspects of our systems related to credit card processing.
Rigorous protections of our customers’ data to prevent misuse or accidental disclosure.
Strong transport-layer encryption protects all communication with and between FoxyCart servers.