Privacy

The audit tool

Built-in scenarios are generated on the server and stored nowhere. A file you upload as a sample is parsed in memory, audited, returned to your browser, and discarded. No evidence chain is written for a sample run. Per-address request counts are held in memory only for rate limiting and are not persisted.

The contact form

What you type is stored so that a reply can be sent, and used for nothing else.

Engagements

Data supplied under an engagement is processed under that engagement's terms, stored in a directory that only that engagement's key can read, and deleted on request.

Cookies and analytics

This site sets no cookies and runs no analytics or session-recording scripts. Fonts are loaded from Google Fonts, which receives your address when the font file is requested.