What we scan
Djoji Ghost Protocol checks the external security of domain names you submit. There are two kinds of scan:
- Passive scans (free, any domain you're authorized to check): we read public DNS, certificate and WHOIS records, look up the domain in public certificate-transparency logs, and make a few ordinary web requests to the site (a secure connection, the home page and robots.txt), the same as any visitor's browser. No port scanning and no attack probes.
- Active checks (only for domains the requesting account has verified it controls, via a DNS TXT record): a port scan of a fixed list of common ports, web-server configuration checks limited to detection categories, and a DNS zone-transfer test. They detect issues without exploiting them, and run at most once per domain every 24 hours.
Neither kind of scan logs in to, or accesses, your private systems or data.
Information we collect
- Email address, when you create an account or join the waitlist
- An email address you choose to enter on the scan form, to send you that scan's completion notice
- Domain names you submit for scanning, and domains you add and verify in your dashboard
- Scan results: findings, score and report, plus the score history for each domain
- With each scan request: the requesting IP address, browser user-agent, and your confirmation (with a timestamp) that you're authorized to scan the domain. We keep these with the scan record for abuse prevention and accountability.
- Share links you create, and how many times each has been viewed
- If you subscribe: your Stripe customer and subscription IDs, your plan and its billing status. You enter card details on Stripe's hosted checkout page; they never reach our servers.
- Basic page-view and performance analytics (Vercel Web Analytics and Speed Insights)
How we use your data
- To run scans and produce your report, score history and PDF summary
- To enforce scan rate limits and prevent abuse
- To send email you asked for: a scan's completion notice, a waitlist confirmation, and, for domains on a monitored plan, a weekly digest and score-change alerts (each of these includes a one-click unsubscribe link)
- To improve our scanning accuracy and finding quality
We don't sell your data.
Who can see a report
- Every report has an unguessable link. Anyone who has that link can see the report's findings and score. Fix guides, the attack replay, score history and the PDF are shown only to a signed-in account that has verified it controls the domain (and, once paid plans launch, whose plan includes them).
- A verified owner can create a share link that gives anyone holding it the full report, with no sign-in, for 30 days. The owner can revoke their share links at any time. Links also stop working if the owner's account is deleted or their plan no longer includes sharing.
- A verified owner can publish a security badge for their site. The badge and its public verification page show the domain's latest score.
Data storage and retention
Account, domain and scan data is stored in Supabase (PostgreSQL). We keep scan records and the request details above until you ask us to delete them. There's no automatic expiry today. Rate-limit counters expire on their own within two days. You can request deletion at any time by emailing privacy@djoji.com.
Third-party services
- Clerk: sign-in and accounts (sets session cookies)
- Supabase: database storage
- Vercel: website hosting, page-view analytics and performance monitoring
- Upstash: scan rate limiting (counters keyed on IP address and account, expiring within two days)
- Stripe: payment processing and subscription billing (receives your email address and handles your card details directly)
- Resend: sending email
- Anthropic (Claude): writing the plain-English summary of each scan
- Sentry: error monitoring for the website
- Cloudflare DNS: looking up your verification TXT record
- Public data sources: DNS resolvers, WHOIS servers and the crt.sh certificate-transparency search receive the domain name being scanned
- Telegram: internal operations alerts to our team, which may include a scanned domain name
Domain names and scan findings are sent to Anthropic to write the summary. No personal information beyond the domain name is included in those requests.
Scanning third-party domains
Before any scan you confirm that you're authorized to scan the domain. Passive scans only use publicly available information and ordinary web requests. Active checks run only after the requesting account proves control of the domain through DNS verification.
Your rights
You may request access to, correction of, or deletion of your personal data at any time. Contact us at privacy@djoji.com. We will respond within 30 days.