Plainly, what we do and do not do.
What we check
Stringer checks public things only: pages, DNS records, certificates and files any visitor or agent can reach. We do not log in to your site, scan behind authentication, or test for vulnerabilities.
What we store
Your account details, the sites and competitors you add, and the results of our checks. If you connect your CMS, the page content you send us and the structured data we write for it. Payments are handled by Stripe; we never see or store card numbers.
How it is run
Stringer runs on infrastructure operated by Wiretap Labs in the United States, with data encrypted in transit (TLS) and access limited to the staff who need it.
Certifications
We do not hold SOC 2 or ISO 27001 certification today. If your review needs a questionnaire answered, contact us.
Report a security issue
Email [email protected] with what you found and how to reproduce it. Please give us a reasonable time to fix it before disclosing it.
How we handle personal data is in our Privacy Policy.