Security & disclosure

How to report a vulnerability to us, and how we handle the data you paste.

Report a vulnerability

Email hello@ismyagentsafe.com with "Security" in the subject. Please include steps to reproduce. We'll acknowledge within 3 business days.

Please don't access other people's data, degrade the service, or run automated scans against it. Good-faith research within these rules is welcome, and we won't pursue it.

Machine-readable contact: /.well-known/security.txt.

How we handle your data

Secret-looking values are hidden in your browser before anything is sent, and again on our side.
Results are kept for 90 days, then deleted.
Payments are handled by Stripe. We never see your card number.