Security

Sessions are signed with AUTH_SECRET. Passwords are hashed with bcrypt. Dashboard routes require authentication. Billing card data is handled by Square — ClientProof does not store PANs.

Report crawls only fetch public HTML from URLs you provide, capped at eight pages, with robots.txt respected. Crawl excerpts are stored with your lead record to generate the report.

Report security issues through the contact form on this site.