Security
This page describes how Crawlixa is built. It does not claim SOC, ISO, or other certifications unless a later legal review adds them.
Accounts
Sign-in uses hashed passwords, session cookies, rate limits, and temporary lockout after repeated failed attempts. Suspended accounts cannot use the product.
Organization isolation
Websites, audits, reports, and billing records are scoped to the organization you belong to. Other customers cannot open those resources through the API.
Crawling
Crawlixa only fetches addresses you submit. Private and link-local targets are blocked. You must confirm you have permission to audit the site.
Payments
Card details are collected by the payment provider. Crawlixa stores billing status and provider references, not card numbers or CVV.
Staff access
Operations staff use a separate control panel with role permissions. Customer data is not mixed into that UI as a substitute for authorization.