Security ProfilesStrava

Security Profile:

Strava

Review Nudge Security's complete security profile for Strava, including supply chain details, privacy policy, terms of service, GDPR compliance, breach history, and more.

What is

Strava

?

Strava is a mobile app and website that connects millions of runners and cyclists.

CATEGORY

Lifestyle

HEADQUARTERS

HOSTING

HOSTING LOCATION

SECURITY CERTIFICATIONS

SOC2 Compliance
PCI Compliant
HIPAA Compliant
SOC2 Compliance
SOC 2 Compliant
GDPR Compliant
ISO 27001 Compliant
FedRamp Compliant
CSA Star Level 1
Compliant

Stop worrying about shadow IT security risks.

Discover and secure all SaaS and cloud apps, accounts, and assets with a full inventory of all accounts ever created in your organization—by anyone, anywhere, on any device.
‍

AUTHENTICATION / SSO

Supported Okta Features
  • SWA
Login with Google support
Login with Microsoft support
Supports SSO
Two-factor authentication via SMS
Two-factor authentication via E-mail
Two-factor authentication via Hardware
Two-factor authentication via Software
Two-factor authentication via TOTP
Two-factor authentication via U2F

SECURITY PAGE

SECURITY PORTAL

BUG BOUNTY

VULNERABILITY DISCLOSURE

supply chain

  • Amazon Web Services (AWS)
  • WP Engine
  • WebDAM
  • Webflow
  • Khoros
  • Branch
  • Movable Ink
  • Statuspage
  • Zendesk
  • SparkPost
  • KnowBe4
  • Mailgun
  • Google Workspace
  • SendGrid
  • HubSpot
  • Google Analytics
  • DocuSign
  • Atlassian
  • Adobe

oauth details

SUBDOMAINS

  • metro.strava.com
  • samsung.strava.com
  • www.blog.strava.com
  • email.strava.com
  • insights.strava.com
  • links.strava.com
  • communityhub.strava.com
  • links1.strava.com
  • www.business.strava.com
  • app.strava.com
  • personal-heatmaps-external.strava.com
  • analytics.strava.com
  • cdn-1.strava.com
  • blog.strava.com
  • support.strava.com
  • heatmap-external-a.strava.com
  • heatmap-external-b.strava.com
  • status.strava.com
  • www.promo.strava.com
  • login.staging.strava.com
  • www.metro.strava.com
  • dev.strava.com
  • assets.strava.com
  • dorado.strava.com
  • segments.strava.com
  • www.staging.strava.com
  • mi.strava.com
  • labs.strava.com
  • developers.strava.com
  • email1.strava.com
  • pay.strava.com
  • m.strava.com
  • heatmap-external-c.strava.com
  • admin.strava.com
  • static.strava.com
  • ftp.strava.com
  • stories.strava.com
  • docs.strava.com
  • tracing-collector.strava.com
  • widgets.strava.com
  • stage.communityhub.strava.com
  • www.stories.strava.com
  • business.strava.com
  • apidocs.strava.com
  • store.strava.com
  • payments.strava.com
  • dam.strava.com
  • maglev.strava.com
  • shop.strava.com
  • promo.strava.com
  • chat.strava.com
  • www.strava.com
  • services.strava.com
  • watch.samsung.strava.com
  • mail.strava.com
  • engineering.strava.com
  • c.strava.com