Authorized. Non-destructive. Transparent.
Security & Responsible Disclosure
2MNY is committed to keeping our platform — and our customers' data — secure, and to scanning other people's property only with care and authorization.
How We Protect The Platform
- All traffic to and from 2mny.com is encrypted in transit (HTTPS/TLS).
- Every scanner runs in an isolated container — a compromised module cannot reach customer data.
- Least-privilege access: scan workers only see the target they are authorized to scan.
- We only scan websites you own or are explicitly authorized to scan.
- Your scan results are never sold or shared with third parties.
How We Scan Responsibly
- Safe-tag policy: destructive and DoS-class Nuclei templates are excluded from the 13,000-template pack.
- Enhancement-only testing: we look for weaknesses, we never exploit, modify or exfiltrate anything.
- 3-gate confirmation: findings pass template matcher, engine verification and a known-bad denylist before reporting.
- Rate-aware crawling: heavy tools run on a weekly cadence so your site's availability is never at risk.
- Deep scans require ownership verification — active testing only runs on sites you've proven you control.
Reporting A Vulnerability In Our Platform
Email [email protected] with details and reproduction steps.
48h
Acknowledgement
We confirm receipt and triage your report.
7 days
Critical fixes
Critical issues are fixed within one week.
90 days
Coordinated disclosure
Public disclosure welcome after fix + 90 days.
Good faith
No legal action
Research respecting privacy and avoiding disruption.
Security Questions About Your Own Website?
Our scanners can tell you in minutes what an attacker would find.
Start Your Free Scan