1. Verified Origin Ownership
Scans cannot be launched against arbitrary targets. Every domain requires cryptographic verification via a unique HTML meta tag before crawler jobs can be scheduled.
Trust, Boundaries & Data Integrity
Security at every product boundary.
AccessPulse is designed from day one to treat security, ownership verification, and evidence privacy as non-negotiable core requirements—not afterthought checkboxes.
Defense in depth
Four foundational security controls
Whether running our scanner or managing your team members, our architecture enforces strict boundaries.
2. SSRF & Perimeter Defense
The browser worker applies bounded navigation and network validation. Private IP ranges (RFC1918, RFC4193), cloud metadata endpoints (169.254.169.254), and internal hostnames are blocked before connection.
3. Strict Tenant Isolation
Data queries and mutation endpoints require active organization context. Authorization checks and organization-scoped queries prevent cross-workspace access.
4. Private & Time-bound Evidence
Screenshot artifacts captured during scans are stored in private object storage. Files are never public and can only be viewed through ephemeral, cryptographically signed access URLs.
Enterprise-ready assurance
Have questions about our security controls?
Our engineering team is happy to review your organization’s vendor assessment or technical requirements.