/01
Encryption everywhere
TLS 1.3 in transit. AES-256 at rest. HttpOnly auth cookies, SameSite=Lax, Secure flag in prod.
/ FILINGS · SECURITY
Security.
How we keep your data — and the source sites you crawl — safe.
/02
Bcrypt password hashing
12-round bcrypt with SHA-256 pre-hash for long inputs. Passwords never leave the API process unhashed.
/03
Audit log for admins
Every privileged action is logged with actor, target, and timestamp. Exports available via API.
/04
Isolated tenant data
Per-user data scoped at the query layer; FK constraints enforce isolation. Postgres RLS on Scale tier.
/05
Audited proxy providers
We only integrate proxy providers that publish ethical-sourcing audits. Cheap-residential botnets never touch your traffic.
Found a vulnerability?
Email security@scrape.dev. We respond within 24 hours and ship fixes within 72.