Security

Introduction

Outbrain is operating under the Teads brand, following the merger of Teads and Outbrain in February 2025. Although Outbrain has recently renamed itself to Teads, the ads you are seeing may still be powered by legacy Outbrain technology. You will know you are interacting with legacy Outbrain technology if you click on the AdChoices logo on ads served by Teads and you are directed to this User Privacy Policy. If you interact with ads powered by Teads technology, you can find out more about how Teads uses your data on the Teads User Privacy Policy. You can also opt out of personalised ads served by Teads.

Our security philosophy

• Understanding the importance of security, we are dedicated to maintaining the integrity and protection of our services. We tailor our security controls to safeguard the data you trust us with.
• We recognize the paramountcy of trust and security for you and your enterprise. We are committed to upholding and defending these values.
• Consistent with our security ethos, robust controls, practices, and procedures are entrenched throughout our organization.
• The Information Security team is composed of seasoned professionals with extensive expertise in cybersecurity, including security architecture, secure coding, privacy standards, and compliance with regulations. Our team holds certifications such as CISSP, CISA, CRISC, C|CISO, and CCSK.

Principles of Secure Development

• We pride ourselves on being agile, constructing a software development methodology that responds to competitive market demands.
• All new recruits receive training in Secure Software Development Life Cycle (SSDLC) to ensure that security is embedded from the ground up.
• Each product journey begins with a review to embed Security by Design (SbD) and Privacy by Design (PbD) principles during the design phase.
• Our systems are rigorously assessed to identify and fortify against known vulnerabilities, such as those outlined by the OWASP top 10.
• Regular security audits are conducted across our core systems, utilizing automated tools and exploratory examinations by third-party experts.
• We operate a Security 'Bug Bounty' Program, welcoming vulnerability reports through our bug bounty portal.

Encryption Standards

• In our handling of information, encryption is a cornerstone, assisting us in compliance with legal and contractual requirements.
• Our cryptographic solutions adhere strictly to industry best practices.
• We champion secure browsing with HTTPS and ensure the encryption of metadata related to our technology.

Access Control

• Entrance to our production environment is stringently controlled, limited to authorized personnel.
• Authorized staff must authenticate through a unique user ID, password, and a two-factor authentication mechanism before establishing a secure VPN connection.
• Employees utilize a Single-Sign-On (SSO) service.

Service Availability and Continuity

• Our commitment to delivering consistent and dependable service is unwavering.
• Our infrastructure is designed for resilience, capable of withstanding component failures or entire data center emergencies.
• Proactive disaster recovery protocols are in place.
• Advanced monitoring systems are implemented to anticipate potential service disruptions.
• We focus on operational excellence with multiple 'Tier-3, SOC 2' compliant data centers.

Continuous Monitoring and Adherence to Best Practices

Our philosophy of proactive security is driven by continuous monitoring and adherence to esteemed industry benchmarks and frameworks. We leverage Continuous Integration (CI) systems and the MITRE ATT&CK framework to ensure a vigilant security posture.

ISO/IEC 27001 Certification

Legacy Outbrain technology and infrastructure has received the ISO/IEC 27001 certification, which guides the creation and maintenance of an Information Security Management System (ISMS). Our commitment to this certification enables us to:

• Rigorously protect our assets, including financial records and personal information.
• Instill greater confidence in our risk management strategies among customers and stakeholders.
• Harmonize with broader standards and regulatory frameworks.
• Uphold our legal responsibilities towards our customers.

ISO/IEC 27001 certification is a testament to our dedication to security and the trust we aim to foster with our clients.