Binalyze Outpost! - Cyber Threat Intelligence

Data Collection and Usage

• Page content: When you activate the extension on a page, it scans the page content locally in your browser to detect indicators of compromise (IPs, domains, URLs, file hashes, CVEs). Page content itself is never uploaded anywhere.

• Enrichment requests: When you explicitly request enrichment of a detected observable, only that observable value (e.g. an IP address) is sent to the third-party threat intelligence service(s) you have configured (e.g. VirusTotal, Shodan, AbuseIPDB). Each service processes the request under its own privacy policy.

• API keys: API keys you provide for threat intelligence services are stored locally in your browser's extension storage and are only used to authenticate requests to the corresponding service.

• Account: If you sign in, your email address is used solely for authentication and license validation.

• Binalyze AIR: If you connect a Binalyze AIR console, requests are sent only to the console URL you configure.

We do not sell your data, collect browsing history, or use analytics trackers.

For more information: https://binalyze.com/privacy-policy