Skip to content

Developer portal

Incident response

Operational process for detecting, responding to, and recovering from security and availability incidents.

Last updated: 2026-06-09

Response summary

Qtangl maintains a documented incident response process with assigned roles, escalation paths, and customer communication requirements. The process covers security events, service disruptions, and material data risk.

Incident lifecycle

FieldTypeRequiredDescription
Detect and triagecontinuousYes

Alerts, telemetry, and operator reports are triaged by severity and customer impact.

Contain and eradicateimmediateYes

Access controls, credential rotation, and service isolation actions are executed to stop spread.

Recoverpriority-basedYes

Services are restored in phased order with validation and monitoring before full return to normal.

Post-incident reviewrequiredYes

Root cause, corrective actions, and prevention owners are documented and tracked to closure.

Customer communication

  • Material incidents are communicated to affected customers with scope and timeline updates.
  • Updates include what happened, current containment status, and required customer actions.
  • Post-incident summaries include corrective actions and prevention commitments.

Business continuity and disaster recovery

FieldTypeRequiredDescription
Critical API servicestarget RTO <= 4hYes

Priority restoration objective for core tenant access and scan lifecycle endpoints.

Background processingtarget RTO <= 8hYes

Queue and scheduler restoration target for asynchronous processing flows.

Data durabilitytarget RPO <= 1hYes

Recovery point objective for operational data under normal backup replication assumptions.

Vulnerability disclosure

Report suspected vulnerabilities to charley@qtangl.com. Include reproduction steps, affected endpoints, and impact assessment. We acknowledge reports within 2 business days and coordinate disclosure timelines with reporters for validated findings. See /trust/disclosure.