Encryption

All traffic is encrypted in transit with TLS. Data at rest is encrypted using industry-standard encryption provided by our hosting infrastructure.

Data Minimization

We only store scan results. Full page HTML is processed in memory during a scan and is not persisted in production. This minimizes the attack surface and your exposure.

Outbound Request Safety

The scanning engine validates every URL defensively before making outbound requests. Private IP ranges, localhost, link-local addresses, and non-HTTPS protocols are blocked, and requests are subject to strict timeouts and size limits.

Authentication

Account credentials are handled by our authentication provider with secure password hashing. Sessions are short-lived and scoped to your account.

Access Control

Production infrastructure access is restricted to authorized personnel, requires multi-factor authentication, and is logged and reviewed.

Vulnerability Reporting

Found a security issue? Please report it privately to security@aisearchaudit.pro. We appreciate responsible disclosure and aim to respond promptly.