Privacy

Last updated November 8, 2026.

VulnScan Total maps internet-facing exposure using public and passive sources. This page describes, in plain terms, how we handle the information involved.

What we process

We process publicly observable information about an organization's internet-facing assets, together with the contact details of the people we are authorized to deliver a report to. We do not perform intrusive testing against systems without a signed engagement.

How reports are protected

Reports are access-controlled and scoped to a single organization. Access is limited to the people an organization designates, and report data is retained only for the duration of the assessment and then removed.

Sharing

We do not sell exposure data and do not share it outside the engaged organization and its authorized representatives.

Contact

Questions about this policy can be sent to privacy@vulnscantotal.com.