Security and your data

Open Settings in Strays

Read-only

The role in your account can't change anything. See every file and permission, and how to remove it in one click.

Your data

Your findings are stored encrypted (AWS KMS) in the UK (eu-west-2), separated per organisation. Cancelling keeps your data (on Free). Admins can download it, or delete the organisation and everything in it, in Settings → Your data. Backups expire within 35 days.

Signing in

Amazon Cognito with multi-factor authentication.

Testing

Every release is penetration tested, including tests that try to read another organisation's data.