What cert.gt is
The public point of reference in Guatemala for reporting incidents, consulting national threat statistics and downloading free resources.
It is a private, community-driven initiative. It is not a government entity, it holds no public or regulatory authority, and it is not the CSIRT-GT proposed in bill 6771. It is open to collaborating with that body once it exists.
Reporting an incident will always be free of charge.
Who operates it
Devel Group backs and operates cert.gt as its founding sponsor. Its DSOC-CERT team has been a member of FIRST, the global forum of incident response teams, since March 2021.
DSOC-CERT in the FIRST directoryfirst.org/members/teams/dsoc-certAn independent advisory board is proposed, with representation from banking, an internet service provider, a university, OWASP Guatemala and civil society.
Privacy
- You can report anonymously; your data is never shared without your consent.
- From the sensors we only store attacker IPs and attack metadata, never traffic belonging to whoever hosts them.
- As a voluntary standard, we apply the principles of data minimization, consent and erasure on request.
- Everything shared with third parties carries a TLP label.
Contact
Incidents: incidentes@cert.gt or the report form.
To be published before launch
- RFC 2350 (team profile)
- PGP key for encrypted email
- security.txt and responsible disclosure program
- Full privacy policy