Security
Security is not a feature of PALANIT — it is the product. This page describes how we approach the security of PALANIT itself.
Our approach
We build with least privilege, encrypt data in transit, and minimize what we collect and store. Palanit Core runs locally and transmits nothing. The hosted service is designed so that raw secrets are never persisted, and you can redact sensitive values before scanning.
Data handling
Scan inputs are processed to produce your report and retained only to provide history you asked for. You can request deletion at any time. We do not use your scan contents to train models or for any purpose beyond delivering the service to you.
Infrastructure
PALANIT runs on hardened infrastructure behind a protected edge. Access to production is limited and audited. We keep dependencies current and monitor for known vulnerabilities.
Reporting a problem
If you believe you have found a security issue in PALANIT, please tell us. See our Responsible Disclosure policy for how to report it safely. We are a security company and we take reports seriously.