Privacy

Last updated: 21 September 2026

This page reads public security feeds and shows them to you. It does not ask who you are, and it has nothing of yours to protect.

There is no account, no login, and no data about you collected. Nothing you do on this page — which items you view, what you search for, which tab you're on — is recorded anywhere.

What this page does

Two endpoints, /api/news and /api/iocs, run on Cloudflare's edge and fetch from a handful of public sources on your behalf:

News: RSS from The Hacker News, BleepingComputer, CISA Advisories, Krebs on Security and The Record.
IOCs: CISA's Known Exploited Vulnerabilities catalog, Feodo Tracker's botnet C2 list, and ransomware.live's victim postings, all abuse.ch and CISA public data.

This runs server-side because none of those sources send the headers a browser needs to fetch them directly — not to hide anything. Every source listed is already public; this page just puts it in one place.

What is logged

Nothing application-side. The endpoints keep no request log, no IP history, and no record of what anyone asked for. Cloudflare, as the host, processes connection data such as IP addresses for delivery and security in line with its own policies; nothing beyond that is added.

Cookies

This page sets none.

If an optional key is added later

The IOC feed can optionally be widened with an abuse.ch ThreatFox key, stored as an encrypted secret on the hosting project. It authenticates this site to abuse.ch; it identifies nothing about a visitor, and nothing about a visitor is ever sent to abuse.ch.

What we do not do

No accounts, no passwords, no email addresses.
No analytics, no advertising, no tracking pixels.
No cookies.
No selling or sharing of data, because none is collected.

Contact

Questions can be raised through the project's repository.