Where do I find the Privacy and Security pages?

Steps

1. Scroll to the bottom of the sidebar. Two links sit in the footer: Privacy and Security.
2. Click Security to open Security & Data Handling.
3. Click Privacy to open the Privacy Policy.
4. Or open Documentation and read Transparency & privacy. It links to both pages.

Good to know

Here is what the Security page says about how Cyberlop handles your data, in short, so you know what to expect before you open it.

• Local passwords need at least 12 characters with a mix of character types. Cyberlop rate-limits failed logins and the lockout grows each time.
• Cyberlop encrypts stored credentials, such as AI provider keys, Git tokens and target login details. It never shows a secret again after you save it.
• Single sign-on is supported. With it, your identity provider handles multi-factor sign-in.
• Each scan gets its own isolated, temporary container. In the cloud, the repository is cloned for the scan and wiped when it ends.
• If you run a self-hosted scan agent, your source stays on your own network and never reaches the cloud, since the agent only connects out over HTTPS.
• Cyberlop sends code excerpts over HTTPS to the AI provider your organisation chose.
• You set the data retention period in Settings → Organization.

The public site has its own Security page too. For the details on the AI provider side, see Settings → AI Provider.

Share the Security page with your own security or procurement team if they ask how Cyberlop treats data. It answers most of the usual questions in plain terms, and it carries a date for the last update, so you can tell how current it is.

The text of the Privacy Policy is not reproduced here, so read it on its own page. For questions about contracts, data requests or a security concern, report it to your organisation's Cyberlop administrator, or contact us.

Related questions

• Where do I find the built-in documentation and step-by-step walkthrough?
• What is each item in the sidebar menu for?
• What is Cyberlop and what does it test?
• How do I tell which workspace I'm working in?
• Does Cyberlop use a real browser when it tests my app?

Updated 8 October 2026 · Back to the help centre