Privacy Policy

Data We Collect

To scope and execute our Vulnerability Assessment and Penetration Testing (VAPT) services, we collect the following information:

• Account and Contact Data: Name, business email address, phone number, corporate LinkedIn profile, and website URL.
• Target Scoping Metrics: Target URLs, API documentation, network IP ranges, hosting providers, and software framework details.
• Operational Log Data: IP address, browser type, and interaction timestamps captured through security-monitoring cookies.

Strict Use of Information

We use your information strictly to fulfil our security engineering mandates. We do not sell, rent, trade, or share your data, source code, or vulnerability metrics with any third party. Your data is processed exclusively to:

• Generate scoping estimates and execute authorized VAPT parameters.
• Deliver engineering reports, developer remediation guides, and signed compliance certificates.
• Optimize our automated infrastructure scans and secure intake portals.

Source Code and Infrastructure Isolation

All client deliverables, vulnerability logs, and technical scoping maps are isolated within encrypted environment partitions. We enforce AES-256 data-layer encryption at rest and TLS 1.3 encryption in transit. Access to your software architecture data is strictly restricted to assigned members of our 16-person engineering pods.

Data Retention and Destruction

We retain technical vulnerability data for a maximum of 90 days following report delivery to support your free re-test cycles. Upon expiration of the re-test framework, or upon an explicit written request from the client, all technical notes, scan results, and architectural maps are permanently and securely purged from our systems.