Secure by Design Pledge

The Secure by Design Pledge is a voluntary initiative aimed at enhancing the security of enterprise software products and services, such as on-premises software, cloud services, and SaaS. It excludes physical products like IoT devices but welcomes companies to demonstrate progress in those areas as well.

Participants commit to working towards seven specific security goals over the next year, documenting their progress and sharing challenges. This pledge is not legally binding but encourages transparency and learning among software manufacturers.

The pledge is supported by CISA and builds on existing security best practices. It aims to improve software security through measures like multi-factor authentication, eliminating default passwords, reducing vulnerabilities, and enhancing security patches and vulnerability reporting processes.