Privacy notice

Visits. We use Vercel Web Analytics to count visits and see which pages people use. It records the pages you view, the site that sent you, your device type, browser and country. It sets no cookies and stores nothing on your device. To count a visit once, it uses a code made from your request that is deleted within 24 hours, so it cannot follow you over time or across sites.

Google Analytics, only if you accept. If you choose “Accept” in the cookie banner, we also use Google Analytics. It sets cookies (named _ga) that last up to 13 months, and records the pages you view, how you arrived, your device and an approximate location. If you choose “No thanks”, it never loads.

Server logs. Our hosting provider keeps standard request logs (such as IP address, browser and the page requested) to run the site and protect it from abuse.

Emails you send us. If you write to hello@ or privacy@, we receive your email address, name and whatever you include, so we can reply.

Our free tools. The calculators, decoders and builders run entirely in your browser. What you type into them is not sent to us.

Listings describe companies, not individuals. We take each fact from a public source, such as an accreditation register or the firm’s own website, and link that source on the listing. A firm can ask us to correct or remove its listing at any time from the contact page.

Visit counts and logs: our legitimate interest in running a reliable site and understanding what is useful. Google Analytics: your consent, which you can withdraw at any time. Emails: to answer you, which you asked us to do by writing.

Vercel (hosting and visit counts), Google (analytics, only if you accept), Cloudflare (domain name service) and MXroute (email), which delivers mail sent to our addresses to an inbox we control. Some of these providers process data outside the UK.

Emails: as long as we need them to deal with your message and any follow-up. Analytics and logs: for the periods those providers set. We do not sell personal data, and we do not use it for advertising.

This site sets cookies only if you accept Google Analytics. You can change your answer at any time: change cookie settings. You can ask to see, correct or delete personal data we hold about you, or object to how we use it, by emailing privacy@pentesting.org. If you are not happy with our answer, you can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.