# Security

URL: https://aura8.ai/security/
Updated: 3 November 2026

> Aura8 does not hold a security certification, attestation or trust centre. This page states plain practices that are in force and a disclosure address. Report a vulnerability to security@aura8.ai.

## What we do not claim
We do not hold a security certification or attestation, and we do not have a trust centre. We do not claim independent assurance.
## Reporting a vulnerability
Email security@aura8.ai.
## Practices
Aura8 runs on software we built ourselves, hosted on AWS in Australia. The information you give us is stored there. Access to report requests and enquiries is limited to the people at Aura8 who need it. The readiness check only fetches public web pages, and it refuses private and internal addresses.

## Questions

### Does Aura8 have a security certification?
No. No certification, attestation or trust centre exists, and we make no claim about where data is stored.

### How do I report a vulnerability?
Email security@aura8.ai.

### What does the free check do with my website address?
It fetches your public home page, robots.txt, sitemap and llms.txt, a sample of key pages and four requests for your home page by AI crawler name when you press the button. It stores nothing unless you ask for the full report.