Cloudflare Web Analytics
Cloudflare provides aggregate page, visit, performance, and Core Web Vitals measurements at the edge. It is enabled site-wide and is designed without cross-site user tracking.
Measurement boundary
Analytics without hunter input.
Vulns.co measures which public pages are useful. Search terms, pasted targets, payloads, commands, generated output, copied values, and form contents stay out of analytics.
Optional Google Analytics 4
GA4 loads only after you choose Allow analytics. It receives sanitized page paths and a small set of controlled interaction categories. Google signals, advertising personalization, enhanced measurement, and optional account data sharing are disabled.
Fields that never become events
- Search text and URL query strings
- Targets, hosts, endpoints, parameters, payloads, commands, and tool inputs
- Generated output, copied text, correction packets, and form contents
- Full outbound URLs or report contents
Events we permit
Page views use query-free paths. Search events contain only length and result-count buckets. Other events use controlled categories such as filter choice, content type, utility slot, language, copy surface, and destination group.
Your choice
The GA4 preference is stored in this browser. Denying it sends nothing to Google Analytics. Use Analytics choices in the footer to change the setting at any time.
Questions or correction requests can use the private GKData contact route.