Security
We ask you to trust our warnings, so we hold ourselves to the same standard.
Watchfox is almost ready. Nothing is for sale yet, and the plugin isn’t out. This page explains how it will work.
Updated
Found a problem in Watchfox?
Thank you. Please tell us privately first, at alerts@watchfox.site. Tell us what you found, how to see it happen, and how to reach you.
- We’ll reply within 3 working days.
- We’ll keep you posted while we fix it, and thank you publicly if you’d like.
- We won’t take legal action over honest research that respects people’s privacy, doesn’t damage anything, and gives us fair time to fix it.
Our contact details are also in security.txt, where security researchers look first.
How the plugin will protect your site
Read only
It never changes your site, installs updates or writes files, apart from its own settings.
Your list stays home
Your site downloads parts of our list and checks itself. Your full list of plugins never leaves it.
Signed list
Every part of our list is digitally signed. The plugin rejects anything without our signature, so a fake warning can’t get through.
No outside code
It never downloads or runs code from anywhere.
How we’ll protect your data
- Every connection uses HTTPS.
- We keep as little as we can. See privacy.
- Each site gets its own secret key, stored scrambled (hashed), never as plain text. Nobody else can send reports as your site.
- The links in our emails do one thing each, and they expire.
We’ll never ask for your password
Not by email, not by phone, not anywhere. If a message that looks like ours asks for one, it isn’t from us. Please forward it to alerts@watchfox.site.
Find out when your site needs fixing.
Leave your email and we’ll write once, on launch day.
Get early access