Is Metal safe?
Review Metal security risks.

The following security profile for Metal includes the basics you’ll need for a vendor risk assessment: security certifications, supply chain details, privacy policy, terms of service, GDPR compliance, and more.

All Security Profiles

Metal Organization Details

Headquarters

United States

Hosting

Hosting locations

Security Program

Security Certifications

PCI Compliant

HIPAA Compliant

SOC 2 Compliant

GDPR Compliant

ISO 27001 Compliant

FedRamp Compliant

CSA Star Level 1
Compliant

Security Page

https://getmetal.io/security

Security Portal

Bug Bounty

Vulnerability Disclosure

Terms of Service

https://getmetal.io/terms-of-service

Privacy Policy

https://getmetal.io/privacy-policy

Status Page

https://status.getmetal.io

Authentication

Authentication / SSO

Supported Okta Features

Supports SSO

Two-factor authentication via SMS

Two-factor authentication via E-mail

Two-factor authentication via Hardware

Two-factor authentication via Software

Two-factor authentication via TOTP

Two-factor authentication via U2F

OAuth Details

Metal Supply Chain

Vercel
Better Uptime
Amazon Web Services (AWS)
Webflow
Google Workspace
Google Analytics
Smartlook
Hotjar
Google Tag Manager

Metal Subdomains

auth.getmetal.io
www.getmetal.io
api.getmetal.io
status.getmetal.io
info.getmetal.io

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.

Try it free