Security & Data Protection
Use Strong Authentication
- Choose a password with at least 12 characters, including letters, numbers, and symbols.
- 2-Factor Authentication (2FA) is enabled by default.
Stay Alert to Phishing & Social Engineering
- FinBursa will never ask for your password or private details via email or phone.
- Be cautious of unsolicited emails or messages pretending to be from FinBursa.
Keep Your Login Credentials Private
- Never share your FinBursa password or email password with anyone.
- If you experience login issues, reach out to our team through contact@finbursa.com.
Verify You’re on the Official FinBursa Website
- Always check that you are visiting https://www.finbursa.com.
- Our website is secured with SSL/TLS encryption to protect your data from interception.
Watch Out for Fake Emails (Email Spoofing)
- Always verify that emails from FinBursa come from an @finbursa.com or @email.finbursa.com domain.
- Be cautious with emails that request sensitive information or contain urgent security warnings.
How FinBursa Protects Your Data
Platform Security
- ISO 27001 Certified: FinBursa follows internationally recognized security standards to ensure the confidentiality, integrity, and availability of your data.
- DDoS Protection & Web Application Security using leading firewall and anti-DDoS systems.
- Regular Security Testing through internal and third-party penetration tests.
- Vulnerability Management with strict prioritization based on severity.
- Data Encryption at rest (AES-256) and in transit (TLS v1.2+).
- FinBursa maintains a privacy policy for our users.
Internal Security Measures
- Employee Device Security using industry-leading endpoint protection and anti-malware solutions.
- Access Controls via Single Sign-On (SSO), Multi-Factor Authentication (MFA), and least-privilege access.
- Continuous Monitoring using Security Information & Event Management (SIEM).
- Backup & Disaster Recovery with continuous backups across multiple secure locations.
Vulnerability Disclosure Policy
FinBursa believes effective disclosure of security vulnerabilities requires mutual trust, respect, transparency, and common good between FinBursa and security researchers.
FinBursa accepts vulnerability reports from all sources including independent security researchers, industry partners, vendors, customers, and consultants.
This policy applies to any digital assets owned, operated, or maintained by FinBursa, including public-facing websites.
Vulnerability Reporting
FinBursa recommends that security researchers share the details of any suspected vulnerabilities across any asset owned, controlled, or operated by FinBursa using the reporting form below.
The FinBursa Security team will acknowledge receipt, investigate thoroughly, and take appropriate action for resolution.
