Security

Admin access uses session cookies, role-based permissions, and two-factor authentication for super administrators.

Uploaded binaries are never executed on application servers. Scanning happens in an isolated worker.

We do not claim that a file is “100% safe.” We report scan status, signature status, and hashes.