Public website analysis
Website scans should use publicly reachable URLs. Do not submit passwords, private admin URLs, API secrets or confidential personal information through scan forms.
Admin protection
Administrative functions are protected behind authenticated access and server-side controls. Sensitive configuration should remain outside publicly accessible files wherever possible.
Report privacy
Private reports and exported data should only be shared with intended recipients.