Wowza Security Measures
Wowza Corporate Security Measures
Rely on video technology delivered by a trusted partner.
Wowza has built a culture of security that protects customer and company data through a holistic set of controls, processes, and guidelines. As part of our commitment to delivering secure streaming services and ensuring customer confidentiality, we’ve outlined the security practices governing our infrastructure and day-to-day operations below. In adherence to these practices, we ask that any customer who identifies a vulnerability contact technical support immediately to streamline the mitigation process.


SOC 2 Type II Compliant

GDPR Compliant

99.95% Uptime SLAs

Product Security
Code Vulnerability Scans
Wowza uses automated tools to scan our source code for vulnerabilities as well as code dependencies. Wowza commits to remediating critical and high vulnerabilities prior to major releases.
Customer Security Capabilities
Wowza offers a full suite of content protection capabilities for customers to configure in deploying their streaming solutions. However, whether or not this is a priority is at their discretion.
Change Management
Wowza’s Engineering team follows a Change Management Procedure to enforce segregation of duties and ensure that peer review is conducted on all code prior to pushing it to Wowza’s production environment.

Internal Security
Risk Management
Wowza maintains a formal Risk Register which is reviewed and updated on an ongoing basis to ensure Wowza is appropriately responding to or remediating any potential risks and vulnerabilities.
Two-Factor Authentication and Access Control
Internally, Wowza leverages two-factor authentication across access points to protect all access to infrastructure, source code, and cryptographic secrets. Wowza also enforces an industry standard password policy for access to company laptops and production environments.
SOC 2
Wowza is SOC 2 certified. This third-party audit report captures Wowza’s internal controls and safeguards to showcase how well those controls are operating. To request a copy of our SOC 2 report, please email security@wowza.com.

Continuous Monitoring and Incident Response
24/7 Support and Monitoring
Technical support is included with all active monthly subscriptions and maintenance and support contracts. Wowza also utilizes various tools to monitor for security events and system uptime.
Wowza System Status
When there is a service-impacting issue, the Wowza System Status page will provide clear and transparent communication to our customers.
Incident Response Plan
Wowza proactively tracks and addresses all incoming security events in accordance with our Incident Response Plan. Wowza’s Incident Response Team triages all incoming security events and is prepared to respond to potential security incidents on a 24/7 basis.

Infrastructure Security
Wowza intentionally does not store customer data or gather personally identifiable information (PII) on our own servers.

Physical Security
Access to Wowza’s office location is restricted to authorized employees, contractors, and visitors using badge entry and entrances are monitored via video surveillance.

Business Continuity
Wowza maintains a formal Business Continuity and Disaster Recovery plan and undergoes annual table-top tests to ensure Wowza’s leaders are prepared in the event of an outage or incident.