SOC 2
AICPA · Trust Services
Security, availability and confidentiality controls
HackCat, LLC
Security & Trust
Hackcat is an AI agent for penetration testing and security work. This page explains what data we process, where the agent runs, and which third-party services we use. We update this page when anything changes.
Overview
15subprocessors
Each provider's purpose and the data involved are listed below.
2regions live
The United States and Frankfurt (eu-central-1). Agent runs, cloud sandboxes and new uploads are placed in a region based on where you connect from.
0card numbers stored
Payments are processed by Stripe; card numbers never pass through our servers.
Compliance
SOC 2 and ISO 27001 are in progress and have not been obtained yet. We'll update this section when we receive the report or certificate.
In progress
ISO 27001
ISO/IEC · ISMS
Information security management system
Hackcat doesn't hold any third-party certification yet. The service is in beta; see the Privacy Policy and Terms of Service.
Security measures
Account security
- Authentication is handled by WorkOS AuthKit; we don't operate our own password database
- Multi-factor authentication (TOTP) is available in Settings → Security
- Sessions can be revoked per device or across all devices from Settings → Security
Billing
Payments are processed by Stripe; card details never reach our servers. Subscriptions can be managed or canceled through the billing portal in your account settings, and deleting your account cancels any active subscription.
Execution environments
By default, terminal and browser actions run in an isolated E2B cloud sandbox. You can delete your sandboxes at any time from Settings → Data controls.
A local execution mode is also available. It runs commands directly on your machine with your user's privileges and no isolation, so we recommend it only on machines dedicated to testing.
Data deletion
- Delete individual tasks, or all tasks at once
- Delete your terminal sandboxes
- Revoke links to tasks you have shared
- Delete your account, which removes database records, cancels your Stripe subscription, and deletes your authentication record
Release integrity
Hackcat's source code is private. Desktop installers, updater signatures, and checksums are published in the public release repository. The desktop updater verifies signed packages before applying an update.
Responsible disclosure
Found a security vulnerability in Hackcat? Report it through the help center. We review all good-faith reports. We don't run a paid bug bounty program at this time.
Where data is stored
United States
Frankfurt · eu-central-1
Hong Kong
Japan
Australia
Agent runs, new cloud sandboxes, and new file uploads are placed by the location you connect from. Connections from Europe use our EU region (Frankfurt, eu-central-1). Connections from North America use the nearest US region. This is decided per request from your IP address, not from an account setting, so a VPN or travel changes it.
Regions live today: the United States and Frankfurt. Hong Kong, Japan and Australia will be listed here once they launch.
The primary database, AI model providers, web search, content moderation, authentication, billing, and analytics are not regional. See the Privacy Policy for international processing.
Subprocessors
The following services process data on our behalf:
- OpenRouter
- Purpose: Routes task requests to third-party AI model providers
- Data categories: Prompts, conversation context, file content, tool output
- OpenAI
- OpenAI
- Purpose: Content moderation
- Data categories: Message content
- Perplexity
- Purpose: Web search performed by the agent
- Data categories: Search queries from agent runs
- Jina AI
- Purpose: Webpage content retrieval for the agent
- Data categories: URLs and retrieved page content
- E2B
- Purpose: Cloud sandboxes (US, or EU for connections from Europe)
- Data categories: Commands, command output, files inside the sandbox
- Convex
- Purpose: Primary application database
- Data categories: Account data, tasks, messages, files, settings
- Amazon Web Services (S3)
- Purpose: File storage (US regions, or eu-central-1 for connections from Europe)
- Data categories: Uploaded files
- Upstash / Redis
- Purpose: Rate limiting and response stream resumption
- Data categories: Transient identifiers and streaming state
- Trigger.dev
- Purpose: Background execution of long-running agent tasks (US regions, or eu-central-1 for connections from Europe)
- Data categories: Task payloads including conversation context
- Vercel
- Purpose: Application hosting
- Data categories: Request data processed by the web application
- Vultr
- Purpose: Application hosting
- Data categories: Request data processed by the web application
- Cloudflare
- Purpose: Network edge, TLS and caching for the website
- Data categories: Request metadata such as IP addresses
- WorkOS
- Purpose: Authentication and account management
- Data categories: Email, name, sessions, MFA enrollment
- Stripe
- Purpose: Payments and subscription billing
- Data categories: Billing contact and payment details (held by Stripe)
- PostHog
- Purpose: Product analytics and error tracking
- Data categories: Usage events and diagnostic data
FAQ
What data does Hackcat process?+
Depending on how you use Hackcat, the service processes:
- Prompts and task messages you send to the agent
- Files you upload (PDF, CSV, JSON, TXT, Markdown, DOC/DOCX, and PNG/JPEG/WebP/GIF images), including text extracted from them
- URLs and search queries used when the agent browses or searches the web
- Terminal commands and their output from agent sandbox sessions
- Browser screenshots captured inside the agent sandbox
- Notes and custom instructions you save
- Account information such as your email address and name
- Usage analytics and error diagnostics
Is data sent to AI model providers?+
Task requests are routed through OpenRouter to the provider behind the model you select, such as Anthropic, Google, DeepSeek, Moonshot AI, or xAI. Your prompt, relevant conversation context, and tool results are sent to that provider to generate a response.
When the agent searches the web or opens a URL, search queries are processed by Perplexity and page content is retrieved through Jina AI. Message content is screened by OpenAI for content moderation.
Each provider processes data under its own terms. Whether data is used for model training varies by provider, so we don't make a blanket guarantee on this point — refer to the policies of the providers listed below.
Will I be notified of a security incident?+
If an incident affects your data, we notify affected users through the service and the help center.
Questions about security?
Contact us through the help center, or report a vulnerability there.