Security
How we handle your code.
We practise what we preach.
Isolated scanning
Every scan runs in its own isolated container.
Secrets never displayed
We report where a secret sits — never its value.
Credential files skipped
.env and credential files are skipped entirely.
Deleted afterwards
Your code is deleted 30 days after the engagement.
UK-based
Processing and storage in the UK.
Named staff only
Only named Good Vibes staff can access your code.
Run it yourself
Prefer not to share code? Run the scanner on your own machine.