Privacy Policy

1. Information We Collect

We collect information directly provided by you when requesting security audits, scoping quotes, or subscribing to updates. This includes:

• Contact details such as email addresses.
• Technical details regarding your application (e.g., tech stack, architecture, target URLs, and scoping details).
• Communication history and inquiry details submitted through our contact forms.

2. How We Use Your Information

Your data is exclusively used to deliver our services, assess security testing scope, communicate quote details, and conduct engagements. Specifically:

• To prepare custom Rules of Engagement (RoE) and fixed pricing estimates.
• To execute penetration testing and security auditing operations safely.
• We never sell, monetize, or lease your target application data or contact information to third parties.

3. Target & Scope Confidentiality

We treat all target URLs, staging parameters, vulnerability reports, and source material shared during security engagements as strictly confidential. Audit artifacts and vulnerability findings are accessible strictly by authorized team members assigned to your assessment.

4. Third-Party Services

Our infrastructure utilizes select third-party service providers (such as MongoDB database hosting and transactional email services) solely for operational storage and communication delivery. These providers are bound by strict data processing confidentiality obligations.

5. Data Retention & Erasure

Scoping inquiries and client communication records are retained to maintain audit history. You may request full deletion of your contact records and submitted scope parameters at any time by contacting us directly.