Service availability (Enterprise Edition)
Minimus maintains a service availability target of 99.9% uptime. You can see real time and historical availability on our status page.Vulnerability remediation policy (Enterprise Edition)
Minimus Enterprise Edition commits to vulnerability patching within set timeframes, excluding only rare and extraordinary exceptions. CISA KEV Active Exploits- Any active exploit vulnerability affecting a Minimus image will be remediated within 1 calendar day from the time a new release is available from the upstream project that fixes the vulnerability. An active exploit is a vulnerability listed in the CISA Known Exploited Vulnerabilities Catalog. See how Minimus clearly marks active exploits in image cards and advisories
- A critical or high severity vulnerability will be remediated within 2 calendar days from the time a new release is available from the upstream project that fixes the vulnerability.
- All other vulnerabilities (Medium, and Low severity) will be remediated within 14 calendar days from the date a new release is available from the upstream project that fixes the vulnerability.
New version SLA (Enterprise Edition)
New upstream version releases are incorporated into Minimus images within 7 calendar days of their original release. This timeline may be extended when significant upstream defects, breaking changes, or exceptional conditions necessitate additional validation. This target is provided under the applicable Minimus Policy. Contact us for further informationCertification
Minimus has secured SOC 2 and ISO 27001 certification.- SOC 2® accreditation is SOC for Service Organizations: Trust Services Criteria.
- ISO/IEC 27001 is the golden standard for information security management systems (ISMS). The accreditation covers information security, cybersecurity and privacy protection.