Security

How we protect your information

• Encrypted connections. This website, the Mentioned app and your AI pages are served only over HTTPS.
• No passwords to steal. You sign in with a one-time link sent to your email.
• Each customer’s data kept apart. Our database enforces separation between customers, so one account can’t read another’s data.
• Limited staff access. Only named team members can open our admin tools, and the view they use can read but not change customer data.
• Keys kept out of code. Access keys for the services we use are stored separately from our code and never shared in it.
• Error monitoring. We’re alerted to errors so we can fix them quickly.

How we read your website

• We read only public pages, up to 25 per scan, and follow your robots.txt.
• Our reader refuses to visit private network addresses, so a scan can’t be used to reach systems that aren’t public.
• Nothing needs to be installed on your website, and we never ask for its passwords. Your AI pages live on a subdomain, so your main site stays as it is.

AI crawler visits

When an AI crawler visits your AI pages, we check, where the AI company makes it possible, that the visit really came from that company. Unverified visits are labeled as such, so the numbers you see can be trusted.

Report a security problem

If you think you’ve found a security problem in Mentioned, please email [email protected] with “Security” in the subject. Include enough detail for us to reproduce it. We’ll reply as soon as we can and keep you updated while we fix it. Please don’t access other people’s data, disrupt the service, or share the problem publicly before it’s fixed.