Privacy and File Handling

ScanSift is not a browser-only client-side converter. Uploaded Nessus files are processed on the server to generate a cleaned Faraday-ready output.

Raw uploaded Nessus files are removed immediately after processing. The cleaned output package and internal review artifacts are retained only temporarily so the user can download the result, then they are automatically removed after the configured retention period.

Uploaded scans are not used for model training, advertising, resale, or third-party data sharing. Basic usage records and access-key usage may be stored so the service can enforce scan limits and support paid access. Consultation requests are routed to the official VAPT Experts contact page.

Do not deploy this tool on low-trust shared hosting for highly sensitive client scans unless your hosting controls, access controls, backup policy, and data handling process are approved by your organization.

For production, configure a strong secret key, disable public directory listing, use HTTPS, restrict admin access to the cPanel account, and keep the Python environment updated.