Policy
Public scanning, identity, and data policy
Observational-only public posture
The public-facing scanner is intended to measure exposed services and metadata without creating, updating, deleting, or authenticating into target systems.
- No login attempts, brute-force behavior, or authenticated entry paths.
- No create, update, delete, or other state-changing interactions.
- Measurement is constrained by explicit throttles and host-level backoff.
- Owners can claim assets, request opt-out, or file abuse reports below.
Public scope and retention
Only operator-reviewed public disclosures belong in this surface. Raw internal evidence, reviewer notes, worker state, and orchestration data remain private.
Public search scope
Published scanner markers
Operators and providers can validate public-facing behavior using the artifacts published here.