Home / Help centre / Security & privacy
Help centre
Security & privacy
Sign-in security, SSO, MFA, secrets and how your data is handled. 23 answers.
How to
Fix a problem
- Why isn't my new password accepted?
- Why was I suddenly signed out of all my sessions?
- Why aren't SSO users asked for Cyberlop's own MFA?
- IP addresses and URLs in my rules of engagement weren't redacted. Is that expected?
Understand it
- How does Cyberlop store my credentials and tokens?
- How are user passwords stored?
- How are sign-in sessions secured?
- Is my workspace's data kept separate from other organizations?
- What happens to my source code after a cloud scan?
- Does my code leave my network when I use a scan agent?
- Is each scan isolated from other scans?
- Can Cyberlop change anything in my repository?
- Is my code sent to an AI provider?
- Can Cyberlop staff see my source code?
- Does Cyberlop redact personal data I type into a profile?
- What kinds of personal data are redacted?
- Do Cyberlop's application logs contain my tokens or cookies?
- Can I delete scans, targets and data whenever I want?
- Is traffic to and from Cyberlop encrypted?
- Could my Git token be sent to a repository host I don't control?
- Can I see what each agent did during a scan and how it reached a finding?
Security question we did not answer?
Our team will answer it directly, or walk through it on a call with your security lead.