Security Controls & Disclosures
How AVENTIQ secures the ScamCheck analysis pipeline against exploitation and abuse.
SSRF & DNS Rebinding Filter
All network connections resolve through an isolated resolver rejecting 127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, link-local, and cloud metadata addresses (169.254.169.254).
Zero In-Browser Execution
ScamCheck never loads unverified scripts, iframes, or client-side assets from evaluated URLs onto the end user's machine.
Strict HTTP Security Headers
Hardened Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), X-Frame-Options: DENY, and X-Content-Type-Options: nosniff.
Cryptographic Password Protection
User credentials are protected using bcrypt salted key derivation. Sessions are signed via HS256 JWTs stored in httpOnly, SameSite=Lax cookies.
Responsible Disclosure Policy
AVENTIQ welcomes vulnerability reports from security researchers. If you identify an issue in ScamCheck, please contact our security team at security@aventia.com. We pledge to acknowledge disclosures within 24 business hours and coordinate responsible remediation before public disclosure.