Data security

Use public, non-sensitive inputs

Run checks on public websites you own or are authorised to review. Do not submit passwords, private API endpoints, access tokens, internal network addresses, or URLs that grant access to customer information.

Connections and processing

The configured analysis endpoint uses HTTPS. The website should also be served over HTTPS. The interface sends requests to our same-domain API. Provider credentials and the analysis endpoint stay on the server. Account access uses mobile verification; auditing your website does not require its WordPress credentials or administrator login.

HTTPS protects data in transit but does not by itself establish how a backend stores data, handles redirects, or controls abuse.

Your reports and shared links

Downloaded reports may contain page URLs and business information. Share them only with intended recipients. A settings link exposes the inputs in its URL and should not be treated as a private report link.

Report a concern

Email contact@pactyield.com with a short description and safe reproduction steps. Do not include live secrets or conduct disruptive testing. We do not claim a security certification based on this website.