Ensure a secure DevOps lifecycle by selecting a source code development platform that protects, audits, and monitors your company’s most valuable assets.
Secure Your Source Code.
Get the Industry Report.
Data breaches are preventable, and no one wants to be the next big breach story. Learn how to secure your source code.
Security and Controls
We enable over 1 million users distributed in over 100 countries to manage all of their repos from a central, secure control point with industry-leading compliance and security.
Advanced User Controls
Advanced User Permission Controls allow you to limit access to projects and repositories based on user type, as well as give you the power to customize access to all projects and repos. This ensures security in software development and saves time managing your team.
Authentication
Flexible permissions for users and groups ensure everyone in your organization gets the right level of access. Plus, you can count on a quick setup and rollout with AD/LDAP for simple user account management, as well as SAML 2.0 for streamlined integrations with Single Sign-On (SSO).
Priority Data Security
We offer the Assembla service from multiple data centers with strong security practices that are independently validated by third-party auditors. Every file you store with Assembla is maintained and encrypted using AES 256-bit encryption in geographically dispersed areas, leveraging both the Assembla data centers as well as the redundant facilities managed by our partner AWS.
Risk Control Planning
Assembla provides additional functionality with security features like code scanning for vulnerabilities and component dependencies, and project management tools to improve team collaboration.
Compliance
Make Audits More Efficient
Track each change made to your source code from project start to finish. Quickly prove to auditors that your organization has the control and monitoring in place to ensure regulatory compliance. Track actions like repo access, code reviews, merge requests, Git pushes, and more. Search for activity by specific users and specific date ranges and generate audit reports straight from your browser.
User Activity Audit Reports
Audit logs let you track actions like repo access, code reviews, merge requests, Git pushes, and more. Search for activity by specific uses and specific date ranges and generate audit reports straight from your browser in XML, CSV, or PDF so your audit process is quick and painless.
Automated Workflows and Notifications
Automate your workflows to take the work out of regulatory compliance. Require code reviews and prevent commits from users groups with Protected Branches. Receive emails and push notifications when key changes are made to your source code.
Assembla is compliant with GPDR and has received AICPA SOC 2 and Privacy Shield certifications
AICPA SOC 2
Assembla has obtained AICPA SOC Type 2 Certification. SOC 2 rigorously evaluates an organization's internal controls over a specified testing period. It focuses on data security, availability, integrity, confidentiality, and privacy of data.
GDPR
Assembla adheres to GDPR data protection principles, which includes: obtaining consent to collect data, conducting thorough audits, implementing robust security measures, access controls and providing the capability to erase personal information.
Privacy Shield
Assembla complies with the EU-U.S. Privacy Shield Framework, ensuring that strict data protection requirements are met when transferring personal data from the European Union to the United States.
The full report is available upon request.
Static Analysis
Find Your Vulnerabilities
More than 75% of breaches are caused by developers inserting secret keys and passwords directly into source code. Assembla automatically finds access keys and passwords left in your code and notifies your team before they’re deployed. Analyze your entire code base for vulnerabilities and scan each commit, instantly, as they occur.
