Tenant isolation
Every project read and write is scoped through workspace membership. Projects are private by default.
Security and trust
Private by default. Clear when it matters.
Your ideas, research, and recommendations stay private to your workspace. You can still inspect the evidence behind every important claim.
Report a security concernPasswordless access
Secure email codes and sign-in links remove the need to store or remember a password.
Network boundaries
Submitted URLs are rejected when they target loopback, private, link-local, or credential-bearing destinations.
Evidence provenance
Captured pages carry canonical URLs, capture times, hashes, and R2 artifact keys. Claims link back to sources.
Resilient research
Long-running checks are resumable, so closing the page does not lose your progress.
No hidden downgrade
If your chosen quality level is unavailable, the check fails clearly instead of quietly using a weaker review.
Responsible disclosure
Send a reproducible report, affected route, impact, and safe proof to support@proofway.xyz. Do not access another customer’s data, disrupt service, or use social engineering. We will acknowledge valid reports and coordinate remediation.