CARVIEW |
GitHub Security
We care about your code
We know your code is extremely important to you and your business and we're very protective of it. After all, GitHub's code is hosted on GitHub, too!
Physical security measures
GitHub's infrastructure is hosted on Rackspace, a publicly-traded company that's committed to keeping your data secure. They provide us with state-of-the-art servers protected by biometric locks and round-the-clock interior and exterior surveillance monitoring. Only authorized personnel have access to the data center. 24/7/365 onsite staff also provides additional protection against unauthorized entry and security breaches.
Software security measures
In addition to Rackspace's system monitoring, we also employ a team of 24/7/365 server specialists at Anchor Hosting to keep our software and its dependencies up to date eliminating potential security vulnerabilities. They have also setup a wide range of monitoring solutions for preventing and eliminating attacks to the site.
Private code hosted on GitHub can only be accessed over a secure protocol. SSL (https) is used on the site when accessing private repositories and we only allow the transfer of private git data using SSH.
Redundancy
Every piece of hardware we use has an identical copy ready and waiting for an immediate hot-swap in case of hardware or software failure. Every line of code we store is saved on a minimum of three different servers, including an off-site backup just in case a meteor ever hits the Rackspace datacenter (we'll keep our fingers crossed that doesn't happen).
Credit card safety
When you sign up for a paid account on GitHub, we do not store any of your card information on our servers. It's handed off to Braintree Payment Solutions, a company dedicated to storing your sensitive data on PCI-Compliant servers.
Email us for more information
Please use our contact form or support site to get in touch with us and we'll be happy to discuss security with you.
Need to report something?
Please email us immediately at security@github.com, this will go directly to one or more of the GitHub founders and will receive our full attention. If we don't respond immediately, there's a good chance we're trying to fix it first.