Privacy
This page describes what thepentestindex.com does with information. The site is operated by Kozi Publishing LLC.
No accounts or forms
The site has no accounts, sign-up, intake forms or contact forms.
Analytics on the live site
On thepentestindex.com, Google Analytics 4 and Microsoft Clarity load automatically. They receive information such as the pages visited, browser and device details, and interactions with the site. Clarity can record session behavior such as clicks, scrolling and what is displayed on the page. These services may use cookies or similar browser identifiers. The scripts do not run on Replit previews or local inspection builds.
The site does not send checklist answers to its own server or store them as a form submission. Analytics may nevertheless record interactions with checklist controls in general usage data or a session replay. Google and Microsoft also process information under their own terms and privacy policies.
Read the Google Privacy Policy and Microsoft Privacy Statement for their information practices and available privacy choices.
The site does not currently offer an on-site control to stop these analytics scripts from loading. Your browser's settings or extensions may allow you to block cookies or analytics requests. The available controls and their effects depend on your browser. Google also offers a Google Analytics opt-out browser add-on; it does not stop Microsoft Clarity or the technical processing needed to deliver the website.
What stays in your browser
When you filter the comparison, emphasize a column, select entries to compare or choose what needs testing, the app keeps that state in the open page’s memory. The app does not submit those selections to us or save them as a form. Comparison selections, filtering and column emphasis reset when the page is reloaded. Analytics may record interactions with the controls, as described above.
Choosing what needs testing moves the page to that section, so the section name appears after the # in the web address, as with any in-page link. Browsers do not send that part of the address to the server. Opening or returning to a surface link, such as #api, can select that surface again from the address. Analytics scripts running in the browser can still observe page navigation and interactions.
Copying a checklist or question uses your device’s clipboard, and printing uses your browser’s print feature. Both happen only when you choose them. The app does not send the copied checklist or print job to us.
The Find My PenTest Match tool creates a preparation checklist. It does not submit an introduction request or send your selections to a provider.
Hosting and security logs
Delivering any website involves processing technical information about each request, such as the IP address, the page requested, the time and the browser’s user agent. The hosting infrastructure processes this information to deliver pages and protect the service. Google and Microsoft may also receive network and device information when their analytics scripts load.
If you email us, we receive your email address and whatever your message contains. We use it to reply and to act on your correction or request. Please do not send passwords, confidential system details or personal data about other people.
Links to providers
Links to providers take you to their own websites. Their privacy practices apply there, not ours.
Changes to this page
We update this page when the site's information practices change. Adding accounts, intake forms, saved selections, provider introductions or different tracking would require a corresponding update to this description.
Questions and requests
Email Partners@thepentestindex.com with any question or request about this page. Describe what your request concerns and share only the information needed to handle it.