We run offensive tooling against production systems. Here is how we keep that safe.
Every scan is gated behind DNS TXT or file-based ownership verification. Unverified domains cannot be scanned.
Scan logs, findings and reports are stored against your account and readable only by you. Access rules are enforced at the database level.
All traffic is TLS encrypted in transit. Stored data is encrypted at rest.
Reports remain available in your dashboard until you delete them. Deleting a scan removes its logs and findings.
Found an issue in Yrzo AI itself? Email hello@yrzoai.com and we will acknowledge within one working day.
hello@yrzoai.com