Security & Privacy Architecture
A transparent technical overview designed for Corporate Security (InfoSec), DevOps, and Compliance teams evaluating ScanTheThings on locked-down enterprise machines.
Auditing With Zero Endpoint or Data Liability
ScanTheThings runs in authentic, unprivileged browser contexts. No local binaries, no cloud database exfiltration, and no tracking cookies.
Zero Elevated Privileges Required
.exe, .pkg), elevated admin or sudo privileges, or Chrome Web Store extensions with wide permission grants (<all_urls>) across all browser tabs.
The core ScanTheThings web app operates entirely inside standard, unprivileged browser tabs. No local daemons, no background file system hooks, and zero elevated registry modifications. Approved instantly by enterprise InfoSec teams without IT support tickets or software whitelisting delays.
For engineers requiring 1-click in-tab auditing behind strict firewalls (Cloudflare) or private login walls, our optional browser extension uses strict activeTab permissions—only running when explicitly clicked, with zero background data collection.
Zero Data Exfiltration Architecture
DevTools Auditable in 60 Seconds
F12 → Network tab) and observe: zero third-party advertising beacons, zero tracking pixels, and zero background telemetry payloads leaving your machine.