Security at Unitizy

This page states who is responsible for security at Unitizy sh.p.k., how we carry out security testing and how to report a vulnerability to us.

Security leadership

Dario Del Giudice — Chief Technology Officer and Head of Security, Unitizy sh.p.k.

Dario Del Giudice is a shareholder of Unitizy sh.p.k. and the company's system administrator. He is responsible for the security of the company's systems and software, and he is the company's EU representative under Article 27 GDPR.

Responsibilities

Defines and approves the scope and rules of engagement of every security test and red team engagement.
Authorizes and supervises the people and tools, including AI models, used in security work.
Manages access, multi-factor authentication and the revocation of credentials.
Leads incident handling and notification.
Oversees the responsible disclosure of the vulnerabilities we find.
Oversees the retention and protection of customer data.

Contact: security@unitizy.com — personal: dario.delgiudice@unitizy.com

Authorized testing only

We test only systems whose owner has given us written authorization, within the agreed scope, time window and rules of engagement. We do not test third-party systems without that authorization.

Responsible disclosure

If you have found a vulnerability in a Unitizy system or in software we maintain, write to security@unitizy.com with a description, the affected system and the steps to reproduce it. We acknowledge every report, keep you informed while we work on it, and credit you if you wish.

Please do not access or modify data that is not yours, and give us reasonable time to fix the issue before disclosing it. Our contact is also published in security.txt.