Last updated: 31 August 2026
YLB Security ("we", "us") operates the ylbsecurity.com platform. We provide AI security assessment, governance, and offensive security tools for teams building and deploying AI systems.
Account data: email address, name, and hashed password when you create an account. Passwords are stored using scrypt and are never stored in plaintext.
Scan data: domains you scan with Branguard, LLM endpoints you test with SentriX, AI systems you register in AegisGRC, and advisory configurations in ThreatLens. Scan results are stored on our servers and associated with your account.
Usage data: server logs that include IP addresses, request timestamps, and user-agent strings. These are used for security monitoring and debugging.
We use your data to provide the platform services, send transactional emails (verification, password reset, scan notifications), and maintain security. We do not sell your data to third parties. We do not use your data for advertising.
Data is stored on infrastructure hosted in Oracle Cloud (Frankfurt, EU). All connections are encrypted via TLS. Session cookies are marked Secure, HttpOnly, and SameSite=Lax. We use Cloudflare for DDoS protection and edge caching.
Account data is retained while your account is active. Scan results are retained for 90 days. You can request deletion of your account and all associated data by emailing us.
We use Resend for transactional email delivery, Cloudflare for DNS and edge security, and Google Fonts for typography. No analytics or tracking services are used.
You can access, correct, or delete your personal data at any time through your account settings or by contacting us at [email protected].
We may update this policy from time to time. Material changes will be communicated via email to registered users.
For privacy-related questions, contact us at [email protected].