Trust Center

Clear security boundaries, without certification theater.

LumicSec explains how authorization, evidence, customer data and human access are handled so teams can evaluate the operating model before using the product.

Read methodology Responsible disclosure

Authorization before depth

Assessment depth is bound to website ownership, explicit permission and exact target scope.

Evidence before claims

Representative evidence and reliability rules control customer-facing conclusions.

Retest comparison before conclusions

Workflow actions and finding disappearance are not proof that a condition is fixed.

Operating controls

Trust is a set of enforceable boundaries, not a badge.

These statements describe the current product operating model. LumicSec does not imply SOC 2, ISO or other certification unless such certification is actually obtained and published.

Security Practices

LumicSec customer assessment workflows are designed to avoid brute force, password guessing, login bypass, destructive exploitation, denial-of-service behavior and uncontrolled mutation.

Authorization Boundaries

Standard and Authenticated Security Assessments remain separate trust boundaries. Deeper application workflows require verified ownership or explicit authorization and target-scoped controls.

Data Handling

Customer evidence stays tenant-bound. The product is designed to retain only the evidence needed for assessment, remediation, reporting and retest-comparison workflows.

Human Admin Access

Human administrators are metadata-only by default for customer security evidence. Exceptional support access uses assessment-scoped, reasoned, short-lived and audited break-glass controls.

Responsible Disclosure

Potential LumicSec security issues can be reported through the published responsible-disclosure policy and security contact.

Infrastructure & Providers

LumicSec relies on selected infrastructure and service providers for application hosting, data services and approved product operations. Provider use does not override customer authorization or evidence boundaries.

Policies

Current service and security policies.

Security & support contact →

Policy 01

Terms and Conditions

Open policy →

Policy 02

Privacy Policy

Open policy →

Policy 03

Acceptable Use Policy

Open policy →

Policy 04

Responsible Disclosure Policy

Open policy →

Policy 05

Refund & Cancellation Policy

Open policy →

Policy 06

Data Processing Notice

Open policy →

Policy 07

Cookie Policy

Open policy →

Policy 08

Security Policy

Open policy →

Policy 09

Security Disclaimer

Open policy →

LumicSec

Loading secure workspace…

Trust Center

Clear security boundaries, without certification theater.

LumicSec explains how authorization, evidence, customer data and human access are handled so teams can evaluate the operating model before using the product.

Read methodology Responsible disclosure

Authorization before depth

Assessment depth is bound to website ownership, explicit permission and exact target scope.

Evidence before claims

Representative evidence and reliability rules control customer-facing conclusions.

Retest comparison before conclusions

Workflow actions and finding disappearance are not proof that a condition is fixed.

Operating controls

Trust is a set of enforceable boundaries, not a badge.

These statements describe the current product operating model. LumicSec does not imply SOC 2, ISO or other certification unless such certification is actually obtained and published.

Security Practices

LumicSec customer assessment workflows are designed to avoid brute force, password guessing, login bypass, destructive exploitation, denial-of-service behavior and uncontrolled mutation.

Authorization Boundaries

Standard and Authenticated Security Assessments remain separate trust boundaries. Deeper application workflows require verified ownership or explicit authorization and target-scoped controls.

Data Handling

Customer evidence stays tenant-bound. The product is designed to retain only the evidence needed for assessment, remediation, reporting and retest-comparison workflows.

Human Admin Access

Human administrators are metadata-only by default for customer security evidence. Exceptional support access uses assessment-scoped, reasoned, short-lived and audited break-glass controls.

Responsible Disclosure

Potential LumicSec security issues can be reported through the published responsible-disclosure policy and security contact.

Infrastructure & Providers

Policies

Current service and security policies.

Security & support contact →

Policy 01