Privacy Policy

What we collect

To run a pentest we collect the information you give us at signup: your name, your email address, and the URL of the application you ask us to test. Payment is handled by Stripe; we never see or store your full card details.

How we use it

• Your target URL is used solely to perform the security test you paid for.
• Your email is used to deliver your report and order updates.
• The resulting report (PDF) is generated, stored, and made available to you at your order page and by email.

Service providers

We share the minimum data necessary with sub-processors that operate the service: Stripe (payments), Cloudflare(hosting, database, report storage, and report email delivery), and the AI model provider that powers the automated test. We do not sell your data.

Analytics & session recording

We measure how this website is used so we can fix the parts of it that don't work. Our analytics are self-hosted on infrastructure we run: the data is not sold, not shared with an advertising network, and not handed to a third-party analytics company. No cookies are set. On every page we record the page you viewed, the site that referred you, and general device and country information. Our hosting provider, Cloudflare, may separately collect aggregate performance measurements as part of serving the site.

On the signup page only, we additionally record an anonymous replay of the session — clicks, scrolling and navigation — so we can see where the order form trips people up. Every piece of text on that page is masked before the recording leaves your browser, including everything you type: your name, your email and the target URL you submit are never captured. We do not record replays anywhere else on the site, and in particular we never record your report pages or their findings.

Recordings are deleted after 30 days. If your browser sends a Do Not Track signal, we collect nothing at all — no analytics and no recording. Any tracker- or ad-blocker will also stop this, and nothing on the site depends on it working.

Authorization & the target you submit

We only test applications you own or are explicitly authorized to test, and we require you to verify control of the target before any scan runs. See our Terms of Service.

Retention & deletion

We retain your order record and report so you can access it after delivery. To request deletion of your data or report, contact us using the email on your receipt.

Contact

Questions about this policy? Reply to any email we send you about your order.