Members

byte

Founded in 1999, Byte is the Dutch and Belgian market leader. Thousands of agencies and merchants rely on its innovative Magento platform-as-a-service called Hypernode. Our mission is to "save developers time" so they can focus on creating the best online stores.

Byte also operates the free MageReport service to verify patch and vulnerability status. Byte has 50 staff and is member of the Intelligent Group.

magemojo

Founded in 2009 MageMojo is the first hosting provider specializing exclusively in hosting support for Magento. By focusing solely on Magento they can provide Merchants with higher performance, deeper application support, and lower hosting costs. They are the co-founders of Commerce Hero, founding members of the Mage Security Council, organizers of Meet Magento New York 2017, sponsors of MageTalk, and sponsors of numerous Magento Meetups around the world.

lexicon

Magedef is an undertaking by Talesh Seeparsan to provide free resources to help Magento developers build more reliable and defensible eCommerce platforms and software.

lexicon

Founded in 1996, LexiConn provides fully managed shared, VPS, and dedicated server hosting. LexiConn specializes in offering secure, optimized environments for Magento, while also bringing a hands-on, personal approach to customer service. The firm's in-depth Magento knowledge and 20+ years of ecommerce hosting experience make them an ideal partner for SMB clients and agencies alike.

Becoming a Mage Security Council Member

To become a security council member, an organization must demonstrate an exceptional commitment to ecommerce security. Requirements include PCI compliancy, proactive intrusion prevention controls, solid incident response processes and security contributions towards the broader Magento community.

In addition to the above requirements, members must also do the following:

Hosting Providers

  • Run Mage Malware Scanner on all Magento customers every 24 hours by default.
  • Identify and contribute new malware rules to the council.
  • Notify all clients of infected stores within 24 hours.
  • Disable public access to infected stores within 24 hours if no response from store owners.

Agencies / Developers

  • Run Mage Malware Scanner on all Magento customers.
  • Patch all customers within 5 business days of patch release.

Follow us on twitter @mage_sec for the latest Magento security news. Contribute to the magesec.org website on github magesec/magesec.