The execution boundary
Start with the workload: how it runs, what surrounds it, and where isolation belongs in the architecture.
Explore the runtimeSecurity & trust
Understand the platform, review how data is handled, and bring your requirements into the conversation.
Explore securityIllustrative review room
Open a sample evidence folder. Each one turns a broad security question into a specific review artifact.
Understand the system
A useful review starts with specific questions about the workload, its access, and the surrounding infrastructure.
Start with the workload: how it runs, what surrounds it, and where isolation belongs in the architecture.
Explore the runtimeUnderstand the relationship between a workload, its identity, and the actions it is permitted to take.
Explore access boundariesConsider the events, logs, and context your team needs to understand what happened and investigate a change.
Explore the architectureFind what you need
Explore the platform guidance and published terms. For a procurement or security review, contact the team about the evidence you need.
Workload isolation, access boundaries, and the security model.
How personal information and privacy considerations fit into Hives.
Review the data processing terms for your use of the platform.
Read the service-level agreement and its applicable terms.
Find the reporting route and guidance for a potential vulnerability.
Discuss attestations, deployment needs, and materials for your review.
Make the review concrete
Tell us what you are building, the information it will handle, and what your organization needs to assess. We can discuss the relevant materials and next steps.
Start a security conversationDescribe the application, its users, and the information it processes.
Bring the controls, contractual terms, and attestations your team needs to evaluate.
Confirm the scope and applicability of the materials before making a deployment decision.
Security is a conversation
If you have identified a potential security issue, follow the responsible disclosure guidance to report it.
Reporting guidance