Privacy notice
CyberDefense IDS · Version 2026-11-03
What we collect
To protect the systems a company connects, IDS receives from them: web requests (visitor IP address, page address, browser name, time, status), login events on servers (account name, IP address, success or failure), security alerts from Wazuh and Suricata, and the list of installed software. For the people who use the portal: name, email address, login times and IP addresses, and the actions they take.
Why
Only to detect and stop attacks, find vulnerabilities, and show each company its own security status. Nothing is sold or used for advertising.
Who can see it
Each company sees only its own data; the database enforces this. The platform administrators can see all data to run and secure the service. Alerts go to the Telegram group and email addresses the company sets.
How long we keep it
| Web requests | 90 days |
| Server login events | 30 days |
| Security events and attacks | 1 year |
| Audit log of portal actions | 3 years |
| Backups | 14 days |
Service providers
Cloudflare (network protection), the hosting providers of the two IDS servers (Singapore and Japan), Telegram (alerts the company chooses), MaxMind (IP location, processed locally), Anthropic Claude (fix plans and protection rules: only public vulnerability data and attack request paths, never company names or visitor IPs).
Security
Encrypted connections, encrypted secrets and backups, two-factor login for every user, and a full audit log.
Your choices
A company can ask for its data to be exported or deleted at any time, and leaving the platform deletes its data within 30 days, backups within 14 days after that. Contact the platform administrator.