Security and data
What the software sends, what it keeps, and what stays with you.
Your data is yours, and kept apart
Hosted: your products, findings, users and teams are stored in a database used by your company only, and our staff open it only to help you. Installed on your server: they stay in your own database, and we do not receive them.
What the licence check sends
Once a day: the licence key, a random installation ID and the product version. We answer with a signed licence. The signature means the end date cannot be edited, and nothing about your environment leaves it.
The optional AI mode (coming)
Off by default. When you turn it on, a question and the facts needed to answer it, such as CVE text and product names, go through our server to an AI provider. Emails, users and credentials are never sent. You can turn it off at any time, and enterprise customers can use their own key.
When a licence ends
There is a warning before the end date and a 7-day grace period after it. Then the system becomes read-only for 30 days, then locked until a new key is entered. Your data is never deleted.
Reporting a security issue
Write to support@secrook.com with the details. We reply within one business day and will tell you what we found and when it is fixed.