Security

Keamanan di Wanesia Security at Wanesia

Bagian keamanan PT Wanesia Digital Integration (Wanesia) mengurus tiga hal: keamanan platform kami sendiri, pengujian keamanan untuk klien atas izin mereka, dan laporan kerentanan dari pihak luar. Security at PT Wanesia Digital Integration (Wanesia) covers three things: the security of our own platforms, security testing for clients with their permission, and vulnerability reports from outside.

SECURITY LEADWANESIA

Arif Nurwahid

Security Lead · Kepala KeamananSecurity Lead · Head of Security
OrganisasiOrganization
PT Wanesia Digital Integration (Wanesia)
LokasiLocation
Indonesia

Ruang lingkup tanggung jawabScope of responsibility

  • Pengujian keamanan terotorisasiAuthorized security testingPenilaian aplikasi, API, dan infrastruktur, termasuk simulasi serangan (red team). Hanya dilakukan dengan izin tertulis dari pemilik sistem.Assessments of applications, APIs, and infrastructure, including adversary simulation (red teaming). Only done with written permission from the system owner.
  • Keamanan platform WanesiaWanesia platform securityTinjauan kode, pengamanan server, dan penambalan kerentanan di layanan WhatsApp Gateway & API serta integrasi klien.Code review, server hardening, and patching across the WhatsApp Gateway & API services and client integrations.
  • Respons insiden & kerentananIncident & vulnerability responseMenutup atau meredam kerentanan baru yang mengenai server kami dan server klien, sambil menunggu tambalan resmi.Closing or mitigating newly disclosed vulnerabilities that affect our servers and our clients', while official patches are pending.
  • Pengungkapan terkoordinasiCoordinated disclosureMenerima laporan dari luar, dan melaporkan celah yang kami temukan di produk pihak lain secara privat ke vendornya.Taking reports from outside, and privately reporting holes we find in other vendors' products to those vendors.
KebijakanPolicy

Pengungkapan kerentananVulnerability disclosure

Menemukan celah keamanan di layanan Wanesia? Kirimkan keFound a security issue in a Wanesia service? Send it to arif@wanesia.co.id.

  1. Sertakan detail yang cukupInclude enough detailLayanan/URL yang terdampak, langkah reproduksi, dan dampak yang Anda amati.The affected service/URL, reproduction steps, and the impact you observed.
  2. Uji dengan itikad baikTest in good faithJangan mengakses, mengubah, atau menyimpan data milik pengguna lain, dan jangan mengganggu ketersediaan layanan (tanpa DoS, spam, atau rekayasa sosial).Don't access, modify, or retain other users' data, and don't degrade service availability (no DoS, spam, or social engineering).
  3. Beri waktu untuk perbaikanAllow time to fixMohon jangan publikasikan temuan sebelum kami memperbaikinya. Kami akan membalas untuk mengonfirmasi laporan Anda dan mengabari perkembangannya.Please don't publish the issue before we fix it. We'll reply to confirm we got your report and keep you posted.