UpSlide is an add-in for the MS Office suite, and we take the security of our code seriously. Below, you will find all the actions taken to ensure the security of our solution.

Code quality and security scanning

We use Sonarqube for code analysis. This allows us to:

1. Perform secure code reviews before each release of the UpSlide add-in and UpSlide servers
2. Ensure that the quality of the code produced meets our standards
3. Avoid vulnerabilities on our codebase

Change Management / QA UAT Testing

Before each release, the following actions are performed:

1. The solution is tested against all supported Office Versions (2016, 2019, Office 365 Insider builds)
2. The code scanner engine is triggered to ensure that no vulnerable code is pushed into production (see above)
3. Manual testing is performed to ensure that no bugs are released into production

Open Source software use

UpSlide may use open source solutions inside its software to support some functionalities. Before each release:

1. The solution is tested for any vulnerabilities using the code scanning engine

Vulnerability classification and risk prioritization

Each Vulnerability is rated depending on its severity and its exposure. The methodology used is the same as provided by the SANS Institute.