When you sign up, we collect your email address, name, and (for email accounts) a bcrypt-hashed password. If you sign in with Google, we additionally store your Google profile picture URL.
When you use the scanner, we store the URLs/IPs you submit as scan targets, the scan results (findings, open ports, exposed endpoints, etc.), and the timestamps of scans.
If you subscribe to a paid plan, we use Stripe as our payment processor. We store your Stripe customer ID but never your card details — those are handled entirely by Stripe.
Scan results are kept for as long as your account is active. You can delete your account at any time by emailing us; all your data will be deleted within 30 days.
You can export all your data via the API, delete your account, or revoke API keys at any time. Email [email protected] with any requests.
You must only scan targets you own or have explicit permission to test. Unauthorized scanning violates our terms and may be illegal in your jurisdiction. We log all scans against the authenticated user.
Security Scanner is operated by Stefan Lederer. Questions? [email protected]