PhishDown, a PhishEye product
Security at PhishDown
Security is an ongoing practice. This page describes our current public commitments without claiming certifications that are not documented here.
Encrypted connections
PhishDown is served over HTTPS so information is encrypted while travelling between your browser and our services.
Controlled access
Access to operational systems and service data is limited to people and services that need it for their role.
Secure development
We review changes, maintain dependencies, and use automated checks to reduce security risk before deployment.
Vulnerability reporting
Security researchers can report suspected vulnerabilities directly to our team for investigation.
Data and privacy
PhishDown processes submitted URLs, domains, and IP addresses to provide security analysis. We may retain technical lookup data to operate and improve the service. Review our privacy policy for the categories of data involved and your choices.
Read the privacy policyReport a security issue
If you believe you have found a vulnerability, send a clear description and reproduction steps. Please avoid accessing or changing data that is not yours.
Email security@phishdown.com