Privacy Policy
Last updated: June 20, 2026
Overview
SPAT (Security Posture Analysis Tool) is operated by Antibody Cyber Technology, LLC. We are committed to protecting your privacy. This policy explains what information we collect and how we use it.
Information We Collect
Using SPAT requires a free account. Depending on how you use the service, we collect:
- Account information — Your email address and a securely hashed password (passwords are never stored in plain text). Your email is used to verify your account, enable password resets, and send essential service notifications. We also record account timestamps (registration date and last login).
- Scan data — The target hostname/domain you submit and the results we generate for it (grade, score, and findings). Scans are saved to your account so you can review your scan history.
- Your IP address — Used for rate limiting (max 20 scans/hour) and basic abuse prevention.
What We Do NOT Collect
- No names, phone numbers, or postal addresses — only your email is required to create an account
- No tracking pixels or third-party analytics
- No third-party advertising, and we never sell your data
- No cookies beyond those required for sign-in and session management
Data Retention
Your account (email, hashed password, and timestamps) and the scans associated with it are retained so you can access your scan history, and remain until you delete them or request account deletion. Rate-limiting data (IP + timestamp) is transient and not retained long-term. To request deletion of your account and associated data, contact us using the details below.
Security
All traffic to SPAT is encrypted via TLS (HTTPS). We enforce security headers including HSTS, CSP, and X-Frame-Options. The tool is designed to perform only passive, non-intrusive external checks on the targets you provide.
Third-Party Services
SPAT does not use any third-party analytics, CDNs, or tracking services. All scanning is performed directly from our server.
Contact
If you have questions about this privacy policy, contact us at antibodycyber.com/contact.