Trust and methodology

What the service covers

Search covers findings in our index, including storage references associated with applications and other discovery sources. Provider pages describe supported storage types and remediation guidance.

Index coverage is partial. A search with no matches does not establish that an application is secure. This service does not provide a comprehensive audit of your source code, cloud account, or every secret in an application.

What a match means

An application reference or matching name is an association to review. It does not prove ownership, current exposure, or business impact. Shared services and similar names can produce irrelevant matches.

Confirm ownership in your own application and cloud configuration. Only inspect resources you own or are authorized to assess.

Freshness and evidence

Findings reflect observations made by the service. A record update time is not a guarantee of when the resource was last checked. Availability and access settings can change after a finding is recorded.

Our public sample assessment is synthetic. It illustrates a review workflow and does not expose a real customer’s data. Credential and private-key finding types are excluded from customer-facing search results.

Data handling

Do not include passwords, access tokens, private keys, or customer files in support requests. Send a finding reference and a concise description instead. Account and payment data handling is described in our Privacy Policy.

Corrections, removal, and disclosure

If a finding concerns an asset you operate, use the takedown form to request review. Include the finding reference, your relationship to the asset, and whether access has been restricted. Removing an index entry does not change the asset’s permissions.

Use the abuse contact for a suspected issue with this service or harmful use. We review reports; this page does not promise a resolution time or a certification.