Security

Your monitoring data, protected

We collect as little as possible, isolate every workspace and encrypt what matters.

πŸ”

Encryption

All traffic uses HTTPS/TLS. Secrets such as bot tokens and payment keys are encrypted at rest with AES-256-GCM.

πŸ”‘

Passwords & sessions

Passwords are hashed with scrypt. Sessions are random, server-side and can be ended at any time.

🧱

Tenant isolation

Every query is scoped to your workspace, with roles for owners, admins and viewers.

πŸ›‘

Abuse protection

Checks and webhooks can’t reach private networks, and logins and sign-ups are rate-limited.

πŸ–₯

Minimal agent

Outbound HTTPS only, per-server tokens stored as hashes, read-only Docker access, no remote commands.

πŸ’³

Payments

Card details are handled by Razorpay (PCI-DSS compliant). We never see or store card numbers.

πŸ’Ύ

Backups

The database is backed up daily and kept for a limited period.

🧾

Audit log

Important account actions are recorded with time and IP address.

πŸ—‘

Your data, your choice

Delete monitors, workspaces or your account at any time. History is kept only as long as your plan allows.

Found a vulnerability?

Please report it privately to support@uptiq.live. We respond quickly and appreciate responsible disclosure.

Start monitoring in two minutes

Free forever for small projects. No credit card needed.