Security and your data

• Sign-in: passwords are stored hashed. Turn on two-factor sign-in under your account. You can see where you are signed in, and sign out of any device.
• Secrets: monitor credentials, connection tokens and webhook addresses are stored encrypted and are never shown again after you save them.
• Your firewall: blocking responses only add single addresses to a list you own, using a token you restrict to that one list. We never read your traffic.
• Public requests: checks and webhooks only go to public internet addresses. Private and internal addresses are refused.
• Access: roles and teams limit what each person sees. Sensitive areas are for owners and admins only.
• Payments: handled by our payment provider; card details never reach us.

To report a security problem, contact us through the address on our contact page and we will respond promptly.