Last updated June 22, 2026
Security Policy
Security expectations for ElevenOrbits accounts, managed services, credentials, customer environments, and incident reporting.
Shared Security Responsibilities
ElevenOrbits uses administrative, technical, and operational controls designed to protect the website, portal, managed services, support workflows, and customer records. Security is shared between ElevenOrbits, customers, vendors, and users.
Customers are responsible for accurate account access, authorized users, secure devices, safe handling of credentials, workload configuration choices, and timely reporting of suspected compromise.
Credentials and Access
Do not send passwords, private keys, recovery codes, full card numbers, or sensitive secrets through ordinary email, public forms, screenshots, or support messages unless ElevenOrbits specifically instructs you to use an approved secure channel.
ElevenOrbits may rotate, revoke, or reset credentials where needed for provisioning, handoff, incident response, account protection, employee offboarding, or platform security.
Security Events
If ElevenOrbits identifies a security event affecting services, we may investigate, preserve records, restrict access, suspend affected systems, contact customers, coordinate with vendors, or take other steps needed to protect the platform.
Customer response may be required to validate ownership, rotate secrets, update software, remove vulnerable content, or approve remediation work.
Reporting Security Issues
Security concerns, suspected account compromise, or vulnerability reports should be sent to security@elevenorbits.com. Active customer emergencies can also be raised through support at support@elevenorbits.com.
Please include affected domains, IP addresses, account emails, timestamps, evidence, reproduction steps where appropriate, and a safe contact method.