Security at Existek

Existek builds and maintains software for clients in healthcare and other regulated industries. We treat security as part of delivery, not an add-on.

Security leadership

Information security at Existek is led by Oleg Feferman, CEO. Oleg is accountable for security across our delivery work and for LinkHMS, the hospital management platform Existek develops and operates.

Security issues, incident reports and client security questions go directly to him and are handled at leadership level.

Security contact: security@existek.com

How we work

Client code is kept in access-controlled private repositories. Access is granted per project and removed when a contributor leaves the project.
Multi-factor authentication is required on company accounts and code repositories.
Everyone working on client projects signs confidentiality and IP agreements before getting access.
Personal data is processed in line with GDPR and each client’s data-processing terms.
Client-specific rules override our defaults, including projects where AI tools or cloud services are not permitted.
We use AI-assisted tools for secure code review and vulnerability testing, only on systems we own or are authorized to test.

Reporting a vulnerability

If you believe you’ve found a security issue in an Existek or LinkHMS system, email security@existek.com with:

a description of the issue and the affected URL or component;
steps to reproduce it;
your contact details.

We will acknowledge your report within [7] business days and keep you updated until it is resolved.

Please give us reasonable time to fix the issue before disclosing it publicly. Do not access, change or delete data beyond what is needed to demonstrate the issue.

We do not currently run a paid bug bounty program.

Changes to this page

If we change our security practices or contacts, we will update this page.

This page was last updated on October 15, 2026.

Contacting us

For security matters, contact us using the information below.

existek.com security@existek.com