Minimal permissions
The GitHub App is installed only on the selected repositories. It reads the content needed for the analysis and does not write to the code. The installation can be revoked from your GitHub settings.
Reports and results
Reports may contain sensitive paths, excerpts and evidence. They are encrypted and should only be shared with authorized people. When an organization shares them, download links and passwords should be sent through separate channels.
Retention and deletion
The applicable retention periods are set out in the documentation and the privacy policy. Deleting the account erases the associated reports and data under the stated conditions, except for logs strictly required for security and traceability obligations.
Reporting a vulnerability
A report about PentestLouis can be sent to support@pentestlouis.com with a careful way to reproduce it. Do not send real customer data or a complete secret in an unencrypted message.