Privacy

The knowledge base is public; utility input stays in your browser; site performance is measured with privacy-first RUM.

Browser-local utilities

Text entered into encoders, decoders, parsers, calculators, the scope sorter, and transform helpers is processed in your browser. The utilities do not send that input to vulns.co.

Hosted MCP

The server at https://vulns.co/mcp answers catalog questions from public JSON. It does not accept pasted HTTP responses, JavaScript, or URL lists. Those three tools run only in the local connector. Do not put credentials or private target data in a tool argument.

Web Analytics

Cloudflare Web Analytics is enabled through automatic beacon injection to measure aggregate visits and real-user performance, including Core Web Vitals. It is designed without cookies or cross-site user profiles.

Public data

context.json, llms.txt, and the MCP connector expose public curated knowledge. Do not place credentials or private target data in URLs.