Privacy

What we scan

Only what you paste or upload: repo file listings and config text (declared inputs). Nothing else on your systems is accessed — the scanner has no network calls, no subprocess, and no cloud credentials.

What we store

Scanned content is processed in memory and discarded. When you're logged in, we keep the scan's findings only — pattern class, file name, line number, severity, and remediation — so you have a scan history. Secret-like values are redacted before anything is written: a finding records that a pattern was present, never the value.

Accounts

We store your email and a salted password hash (pbkdf2-sha256) for login, and your plan. We never sell data.

Built by Ingenious AI. Questions: [email protected].