Security at AttackSurface.

AttackSurface is strictly an observation engine, not an active attack tool. We never execute injection attacks (SQLi, XSS, SSRF), payload fuzzing, brute force dictionary attacks, or unauthorized privilege escalation. All telemetry is captured through standard, non-intrusive DNS queries (RFC 1035), Certificate Transparency monitoring (RFC 6962), and benign HTTP GET/HEAD requests.

We adhere to a strict Zero-Fabrication standard. We do not invent synthetic target vulnerabilities, extrapolate speculative threat numbers, or fabricate company metrics. Every flagged delta is backed by raw wire telemetry with a verifiable SHA-256 checksum and timestamp.

• Encryption in Transit: TLS 1.3 enforced across all web interfaces, WebSocket channels, and REST endpoints with strict HSTS preloading.
• Encryption at Rest: Database volumes and Redis memory snapshots encrypted with AES-256.
• Role-Based Access Control (RBAC): Granular permissions separating standard researcher sessions from administrative operations.
• Audit Trails: Immutable audit logs tracking all administrative interventions, source configurations, and telemetry pipelines.

Your research targets, active watchlists, and temporal queries are strictly confidential. AttackSurface does not monetize researcher search patterns, sell targeting queries to third parties, or alert targets to your investigative focus.