Safe for your clients' sites and your data
AccessWatch visits client sites like a careful visitor and keeps what it learns to itself.
Read-only scanning
Scans load pages in a browser and read them. Nothing is installed on the site, and no script or widget is injected.
A polite crawler
robots.txt is respected, and at most two pages of a site load at once.
Protected credentials
Logins for staging sites and Slack webhook addresses are stored encrypted (AES-256-GCM).
Guarded network access
Every request a scan makes is checked, so scans can't be pointed at private networks or internal services.
Hosted in the EU
Results and reports are stored in the EU. Nightly backups are encrypted before they are stored off-site.
Account protection
Optional two-factor authentication, rate-limited sign-in, roles, read-only client logins and an audit log.
Questions from your security team?
We're happy to answer them.