Skip to content
Hive Audit

Security & Responsible Disclosure

Security is built into every request. We are committed to protecting our infrastructure and being transparent about our security posture.

Platform Safeguards

Safe Scanning (SSRF Protection)

Every URL submitted to HiveAudit is validated against a protocol allowlist (HTTP/HTTPS only). We strictly block access to localhost, private IP ranges (RFC 1918), and cloud metadata endpoints to prevent Server-Side Request Forgery.

Abuse Prevention

We implement multi-layer rate limiting and input sanitation. Our crawlers respect a maximum execution time and response size limit (5MB) to protect our resources and your server's bandwidth.

Responsible Disclosure

If you have discovered a security vulnerability in HiveAudit, we appreciate your help in disclosing it to us in a responsible manner.

Guidelines for Reporting:

  • Share the full details of the vulnerability.
  • Give us reasonable time to fix the issue before making it public.
  • Do not attempt to access or modify data that does not belong to you.
  • Do not perform any Denial of Service (DoS) attacks.

Report vulnerabilities to: simplexmotus@gmail.com

Audit Security Limitations

Not a Penetration Test

HiveAudit checks for configuration-level security signals, such as HTTP response headers and SSL status. These checks are automated and do not substitute for a professional penetration test, code audit, or exhaustive security review.

A high security score in HiveAudit does not guarantee that your website is immune to all attacks.