Privacy

How samples are handled

Only upload files you are authorized to inspect. Temporary workspaces are deleted when a request finishes. Hashes, verdicts, and the JSON report are stored in a local SQLite database so share links work. The binary does not stay overnight.

What is stored

File name, hashes, score, extracted indicators, and the report JSON. The raw executable is not kept after analysis. Scan counters and recent history are derived from that database.

Outbound lookups

Identify lookups for webhooks and bots are read-only and time-capped. Samples are not uploaded to VirusTotal. Set retention and access control before exposing this on the public internet.