AIPentest
Trust Centre

Can you trust this platform?

Here's exactly what happens to your code when you run a scan, in plain terms.

Your code is scanned in memory only

Uploaded archives are unpacked in server memory for the duration of the scan and are not written to disk or persisted after the response is returned.

Findings never leave your session

Your report is generated and returned directly to your browser. We don't store scan results in a database, and nothing is used for training.

Static analysis, not code execution

AIPentest reads your source as text and pattern-matches against known risk signatures. It never executes, imports, or runs any code you upload.

You control what you upload

Only include what you want scanned. We recommend excluding node_modules, build artifacts, and anything already covered by .gitignore.