Keeping the people and agencies who rely on Swiftly safe is important to us. If you think you’ve found a security problem with any of our products or services, we want to hear from you.
How to report
Email us at security@goswift.ly. Please include:
- What you found and where (the web address, app, or product)
- Steps we can follow to see the problem ourselves
- What you think someone could do with it
- How we can reach you
Screenshots or a short video are helpful. You can also report anonymously, but then we can’t follow up with you.
Swiftly will confirm receipt of your report within 3 business days.
What you can report
- Weaknesses in Swiftly’s websites, apps, or services
- Information that looks like it was exposed by mistake
- Emails, texts, or websites pretending to be Swiftly
Not a security issue? For help with your account, a product question, or something that isn’t working, please contact support@goswift.ly.
Bug bounty
We don’t currently offer payment for reports, but we’re grateful for your help in keeping public transit technology secure.
Swiftly’s investments in security
Swiftly is SOC II-certified to ensure all data and systems follow the latest best practices in cybersecurity.
Our cloud-centric, security-minded approach to transit software provides unparalleled protection for all agencies and partners we work with. Swiftly is a 100% cloud-native SaaS platform and, unlike traditional solutions, does not require any software or hardware to be installed on-premise at an agency. This means Swiftly does not expose agencies to any new security vulnerabilities at the network or server level. Swiftly also performs an annual internal risk analysis review of its systems to proactively identify potential vulnerabilities and build a threat model.
We automatically roll out updates to our software on a regular basis as well, ensuring agencies don’t face vulnerabilities from outdated software. Our commitments to security and quality control are reflected in 99.9+% uptime and world-class NPS scores, providing agencies with confidence in system reliability. More information can be found at https://security.goswift.ly/
