Discovery evidence stays scoped
Collector reports, inventory records, evidence, exports, and scan history are available only after website authentication. Unauthenticated visitors can see only login, security, privacy, and favicon routes.
Privacy policy summary
Privacy-first discovery evidence
Breakwater is built for authorized discovery workflows. The website keeps customer discovery evidence behind an authenticated session, limits telemetry to product-quality events, and avoids collecting secrets or raw credentials.
Privacy-safe product events
Breakwater may record authenticated UI events for reliability, support, and feature quality. Tokens, OAuth codes, passwords, raw report bodies, authorization headers, and raw evidence payloads are not accepted as telemetry.
Read-only analysis surface
MCP connector surfaces are bounded to read-only discovery analysis. AI prompts should cite evidence and uncertainty, and they should not initiate cloud-side LAN scanning or write actions.
Session-protected workspaces
Website sessions are short lived, secure, HttpOnly, SameSite-strict cookies. Download pages and installer scripts require the same authenticated session as the command center.
Contact and review
Use the Security page for threat-model and assurance details. For a private deployment or data handling review, contact Breakwater through your normal customer support path.