Web Governance
Where does the infrastructure live?
Where does Web Governance house their infrastructure?
How does Web Governance scan?
What Is Required From an Implementation Perspective?
We use Google Cloud Platform as the hosting environment for our services.
Web Governance crawls your public-facing websites and does not access or store any confidential data. The only data that Web Governance stores (that may not be publicly accessible) are the names and email addresses of our customer's users, which we do not make publicly available. All data and backups collected will be kept for at least 30 days before being permanently deleted if and when the client exits, with the exception of logs.
Scanning public websites is done by both known and unknown crawlers every day. This is a part of the way the internet works. Google, Bing, and other search engines, as well as completely unknown companies, crawl websites to gather information and to monitor performance and the like. What Web Governance does is entirely similar, and has no detectable effect on website performance.
Unless otherwise agreed upon, the location of customer data is based on the Web Governance branch that your contract is with. This means that customer data for US Web Governance offices and subsidiaries are processed and stored within the USA, customer data for AU Web Governance offices and subsidiaries are processed and stored within AU, and customer data for EU and UK Web Governance offices and subsidiaries are processed and stored within the EU.
Login credentials (name, email, one-way hashed password, and data-location id) are stored centrally in our login-service, which resides in the EU.
For more information, see the user guide article:
Monsido's Data Hosting and Security.
Web Governance scans with a combination of dynamic discovery using breadth-first approach and XML sitemap if it is explicitly supplied or discovered through robots.txt.
For more information, see the user guide article:
As long as it is internet accessible, nothing needs to be installed or added to your current infrastructure in order for Web Governance to scan your website. Monsido's statistics and pages prioritized by number of views have a script which can be added to your Google Tag Manager.
If you opt to scan password-protected or otherwise restricted web pages or documents, and if this is permitted by the contract you signed with Web Governance, you must make sure that the information in these web pages and documents is not confidential since Web Governance cannot guarantee the same level of security as you can.
For more information, see the user guide article:
Web Governance