Do you perform regular security audits and vulnerability scans?

Yes, Dify conducts regular security audits and vulnerability scans to ensure that our customers can use our services with confidence. We also comply with external audits and international security standards (SOC 2, ISO 27001, etc.) to keep our security measures up to date.

Is the system uptime guaranteed, and is there an SLA (service quality assurance system)?

Yes, we are building a system with the highest priority on stable operation. We have set a target utilization rate of 99.91 TP3T. However, this is not a guarantee of uptime. If you require a stricter SLA (service quality assurance system) that guarantees high availability and recovery time in the event of a failure, please contact us for a separate contract.

Do you have measures in place to counter cyber-attacks such as DDoS attacks on your servers?

Yes, Dify has taken measures against cyber-attacks, including DDoS attacks, to ensure that our customers can use our services with peace of mind.

Automatically detect and block unauthorized access and abnormal traffic by leveraging the security functions of the cloud infrastructure

Implement redundancy and load balancing mechanisms to ensure stable service operation

We also comply with international security standards (SOC 2, ISO 27001, etc.) and operate with a focus on reliability and safety.

If an open source (Dify) vulnerability is discovered, will you respond immediately?

Our top priority is to ensure the safety of our customers using our AI chatbot service, and should any vulnerabilities be discovered in the open source software we use, including Didify, you can rest assured that we will respond quickly and carefully as described below.