DeltaForsch protect your data. scans data from all over the web to find the gaps between the exposed data from the servers, and the actual rendered web pages.

Security | DeltaForsch

DeltaForsch is a security company. We hold ourselves to the same standards we expect of the platforms we scan.

Read-only by design

Our scanners only issue unauthenticated GET requests against publicly reachable surfaces. We do not log in, write, mutate, brute-force, or interact with anything that isn't already public.

Data we store

Scan inputs (host or URL) and scan outputs (the report).
Your account email and authentication metadata, when you sign in.
Aggregated, non-identifying telemetry about scanner performance.

We do not sell data and we do not share customer scans with third parties. See our Privacy Policy for details.

Infrastructure

Hosted on reputable cloud infrastructure with encryption in transit (TLS 1.2+).
Encryption at rest for all persistent storage.
Authentication via OAuth — we do not store passwords.
Least-privilege access controls for the engineering team.

Reporting a vulnerability

We welcome reports from researchers. See our Responsible Disclosure page or email security@forsher.co.il.

Compliance

Enterprise compliance work (SOC 2, ISO 27001) is in progress as part of our Team plan rollout. Contact us for our current status.