Privacy
A security firm’s website should collect as little as possible. This one collects almost nothing.
What this site collects
- No cookies and no tracking or analytics scripts.
- No third-party requests. Fonts and every other asset are served from this domain.
- No forms. Contact happens by email, which you start from your own email client.
- If you use the theme toggle, your choice is saved in your browser only (local storage). It is never sent to us.
Server logs
The site is delivered by Cloudflare. Like any web server, Cloudflare processes technical request data such as IP addresses to deliver pages and protect the site from abuse. We see only aggregate traffic statistics, not individual visitors.
When you email us, your message is handled by our Microsoft 365 email service and is used only to reply and to deliver any work you engage us for. We don’t sell or share contact details, and we don’t add you to a mailing list without asking.
Our tools
cpcsc-mcp runs separately from this website and has its own data handling, described in its documentation.
kev-check sign-in
-
To sign in to kev-check, you enter your email address
and Cloudflare Access emails you a one-time code. Cloudflare processes the address to
send that code. Signing in sets session cookies on
kev-check.exploitsbay.comand Cloudflare’s sign-in page, not on this site. - We see your address and when you signed in. We use it only to control access to the tool. We don’t add it to a mailing list or use it to contact you.
- The CVE identifiers you check are compared against CISA’s catalogue and returned to you. The app doesn’t store them.
- To have your address removed from our user list, email us at the address below.
Questions or requests
To ask what information we hold about you, or to have it corrected or deleted, email info@exploitsbay.com. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Last updated October 11, 2026.